Network Security

Hello all,  about to go through a penetration test and was wondering if there was a checklist of things to do to tighten down an ASA as much as possible.  Something like 1) turn off this service 2) Set this to that.  etc.  I know every environment is...

 Been pasting config from old 5520 - 8.4(7) to 5545 - 9.1(1) and some commands are not takinf. Could anyone give me some insight as to why? There  are more but I thought I would start with these.Thank you*****crypto ca trustpoint ASDM_TrustPoint5 enr...

Hi,I use L3 switch 3560G with vLan to connect machines from several sites.(L2)    (L3)     (L3)    (L3)xx11--->xx01<--->yy01<-->zz01e.g.xx01----interface GigabitEthernet0/21 spanning-tree portfast trunk           <--to yy01!interface Vlan1 ip address...

I have this toplogy: A ------ ASA -------- B A's real IP is 1.1.1.1B's real IP is 2.2.2.2B's mapped IP is 3.3.3.3 How do I NAT it so that when A tries to connect to 3.3.3.3, the destination is translated to 2.2.2.2.  But at the same time, when B conn...

Hi,I have a 5550 working in routed mode with 8.0(4) version. My configuration have one physical interface in tunnel mode with 4 subinterface, 3 of them are inside and the forth one is dmz interface. Another phisical interface is configured as Outside...

Hi!Have anyone tried to run ASDM 6.1(5) and ASDM-IDM Launcher 1.5(50) on a windows server 2008 r2? Currently the computer is running windows XP and I want to upgrade to a server.. /Lajja

Hello, I have just migrated from a PIX 6.3 to ASA 9.1(1), everything seems to work fine except for the ASDM access from the outside interface. I am able to get ASDM access from the inside interface. Strangely I am see accepted packets in the logging,...

Hi, I was hoping to get some assistance from the community on 5585 part numbers/licensing. We have recently purchased some 5585-X SSP-20's.  The part number ordered was ASA5585-S20C20XK9       "ASA 5585-X Chas w/SSP20,CX SSP20,16GE,4 SFP+,2 AC,3DES/A...

Hi, I would like ot create a DMZ zone in my ASA firewall . Need to publish three webservers in DMZ which need to access from internet and inside users. I have 3 public IP for 3 webservers. Would like to do NAT as well.Please see the subnets which i h...

We have a couple of 5550's setup as an active/passive HA pair.  Recently one of the firewalls (standby) had a hardware issue and needed to be replaced.  Would it be easier/better to just restore the backup config from the defective appliance or shoul...

Hallo,I have a little Routing Problem between an ASA 5505 and OpenVPN Gateway. The ASA 5505 is my Default Gateway. When I open a VPN-Tunnel over the OpenVPN Server, I only can see the LAN IP-Address of the OpenVPN Server, but nothing else. Before I i...

Sadly dissappointed in the documentation...  I would think that one of these parts would be the rack kit used when eliminating the slide rails to fit the 5585 in a narrow rack as described in the hardware installation guide ( http://www.cisco.com/c/e...

I found the address assignment pool, which is just an IP range.How do I find what has actually been assigned?I also need to verify how many IP's I have left unassigned. Thanks,Dan

Hello -   I had the issue last month with not bein able to update the definitions of the CSC-SSM module on our firewalls.  After bricking one of the modules and replacing it, I had both modules (active/standby ASA5520) updated to 6.6.1125.0.1145.  Ev...