Network Security

Hi i'm new to the world of asa and i hope that someone can guide me in the right direction.We have a 5510 (7.1) with 4 active interfaces an one wanOur ISP have given us a public ip range. We have set up default route and we have connection to the int...

Hello Experts,I need some assistance to provide limited access from remote to local machines over STS Tunnel. The STS Tunnel is estlablished between two sites and I want that remote machine can access only few machines with specific ports.Lets say 19...

Hello Experts,We need to create a STS tunnel with one of our client and they have the load balancer in front of their firewall and two ISP link are terminated on load balancer and load balance internal network is connected with firewall. Firewall int...

Hello all.  ASA IOS is v8.22.   I have setup overall police (10 down 5 up) on outside interface to match ISP bandwidth (for congestion determination) as well as two rules to put packest into LLQ.  First rule is for all traffic to DataCenter and it is...

Good day!In my possession Cisco ASA 5515 and three interfaces: LAN 10.1.1.1 (network 10.1.1.0/24)WAN1 1.1.1.130 (network 1.1.1.128/26)WAN2 1.1.2.5 (network 1.1.2.0/24) Now the traffic goes through WAN1 - all web-application in NAT address pool 1.1.1....

hi the mobiles devices are unable to access the gmail on pop3 and imap through wirelesseven though imap and pop3 both are allowedfollwoing is the service-group for allowed protocolsobject-group service allowed_internet service-object icmp service-ob...

I'm looking for any advice or suggestions on best practice for the task of upgrading from a PIX 525 running 6.3 to an ASA 5525X with IPS, the PIX is setup in active/standby failover and the ASA will be setup the same way. The PIX has been in service ...

I know that the FWSM and ASASM both have OSPF as a routing protocol, at least in a limited capability. Do they support VRFs?Thanks,Doug                  

Hi all,I need to get up to speed on deploying and maintaining a Cisco ASA 5510 for a branch office.  What are my options?  I've used Trainsignal for self study before along with QA.com for instructor led courses and was happy with both.  They both of...

fw-asa# sh fragmentInterface:    Size: 200, Chain: 24, Timeout: 5, Reassembly: virtual    Queue: 0, Assembled: 111311, Fail: 509634, Overflow: 0How to monitor the item "Queue" or "Overflow" in this output?I wish I could get it via SNMP GET.Thank you....

Hi,Is there a way to insert a static route when tracking object results in a failure.ip route 1.1.1.1 255.255.255.255 2.2.2.2 track 100track 100 rtr 100 reachabilitysla monitor 100 type echo protocol ipIcmpEcho 3.3.3.3 interface Outside frequency 5sl...