Network Security

Hi, I was hoping to get some assistance from the community on 5585 part numbers/licensing. We have recently purchased some 5585-X SSP-20's.  The part number ordered was ASA5585-S20C20XK9       "ASA 5585-X Chas w/SSP20,CX SSP20,16GE,4 SFP+,2 AC,3DES/A...

Hi, I would like ot create a DMZ zone in my ASA firewall . Need to publish three webservers in DMZ which need to access from internet and inside users. I have 3 public IP for 3 webservers. Would like to do NAT as well.Please see the subnets which i h...

We have a couple of 5550's setup as an active/passive HA pair.  Recently one of the firewalls (standby) had a hardware issue and needed to be replaced.  Would it be easier/better to just restore the backup config from the defective appliance or shoul...

Hallo,I have a little Routing Problem between an ASA 5505 and OpenVPN Gateway. The ASA 5505 is my Default Gateway. When I open a VPN-Tunnel over the OpenVPN Server, I only can see the LAN IP-Address of the OpenVPN Server, but nothing else. Before I i...

Sadly dissappointed in the documentation...  I would think that one of these parts would be the rack kit used when eliminating the slide rails to fit the 5585 in a narrow rack as described in the hardware installation guide ( http://www.cisco.com/c/e...

I found the address assignment pool, which is just an IP range.How do I find what has actually been assigned?I also need to verify how many IP's I have left unassigned. Thanks,Dan

Hello -   I had the issue last month with not bein able to update the definitions of the CSC-SSM module on our firewalls.  After bricking one of the modules and replacing it, I had both modules (active/standby ASA5520) updated to 6.6.1125.0.1145.  Ev...

Hi ALL expert I replaced my old firewall PIX 501 by 5505 but it is very slow for internet access when using 5505. Do you have such experience for this case?What configuration missing in my ASA 5505? ASA Version: 8.4(3)ASDM Version: 6.4(9) Hugo

Hello:I am trying to setup active/standby failover on a pair of ASA 5505's that have the security plus license on them.  Whenever I enable failover though, they seem to not want to talk to each other and I am at a loss as to why.In terms of setup of ...

So the scenario is that we have an exchange server with one leg on the Inside interface (my DMZ) and I want to NAT that to one of my public range of addresses.  These are nnn.nn.n.232/29.  The ISP has .233, the ASA outside interface is .234 and I wan...

Hi All,I want to backup all the radius logs before upgrading of the ISE from 1.0.4 to 1.1.0. I have already took a back up of application data. From Gui under Monitoring Node-->full backup on demand1)Is that all for the radius logs?2)If I have upgrad...

Good day CSC,I am trying to configure an acl to deny rdp traffic on one of our server which has a static nat from one of our public IP. How can I configure it without dropping all other traffic? Will these configuration do it? access-list (acl name) ...