Network Security

I have a ASA-5510 (9.11-4-K8) monitoring a network that is required to use the DISA STIGs for certain security settings. there is a requirement (STIG ID NET0965) that requires the following:The network device must be configured with a maximum wait ti...

Hello EveryoneI am having issues publishing SMTP via our ASA 5525.I feel like i have everything correct but not working.  Note that we only allow SMTP outbound and inbound from a particular set of IPs.   Is there something different i need to do when...

I am trying to install a new ASA 5505 and I can not connectto ASDM version 6.5.4 with Windows 8 Pro.The ASA ia giving me a correct ip and http server is enabled with the correct address allowed.I can ping the asa from the 8 Pro Laptop.I can connect w...

Hi I have been using a few days the firewall ASA5505 they've completely put new, the ASA Version 8.4 (2) have been playing and the ASDM version 6.4 (9). I have the Basic Config loaded with the command "conf t" and "Facorty default-config."Now I want ...

Post migration from FWSM to Standalone ASA Kit , is there a need to explicitly Deny Any on the ASA's at the end of line .Thanks

Hello,I'll start this discussion off more generally, with my requirements, and if any supplimental information about my config is necessary, please let me know.I would like to have 2 SSID's being broadcase on my access point.  Eg:  wood-corporate, an...

Forgive me if this question has been asked in other forms before but I have not been able to find a recent answer.Does the Cisco ASA platform support /31 RFC 3021 addressing on it's interfaces in any of the latest versions of code.  We work regularil...

Hi,I have a problem configuring ASA 5505 to connect to internet because the modem that connect to internet was tagged with vlan to the ISP. As i know that the ASA 5505 is in switch mode, so in order to connect to the modem, its need to be in the rout...

Hi,Have a question regarding HTTPS traffic going through IPS (AIP-SSM). I understand that Cisco IPS cannot monitor encrypted traffic except monitoring the headers and trailers. So,- Does it mean there's no use of sending HTTPS traffic to AIP-SSM (unl...

                   i have just noticed that after upgarde of image and asdm to 911 and 711, the implicit deny acl is missing from the outside interface. Is this deliberate or a poor upgrade. i am upgrading from 8.25 normally, depends what the reselle...

Hi, I want to use active authentication if AD agent cannot identify user if Active Directory Agent failed.I try to configued the active authentication on ASA Cx.But, I don't understand well how to do it.Could you say to me how to do ??Someone can hel...

                   Forumwhile working at a client site today I was examining ACL's on one of the Customers ASA boxes.I went to the Access List section to observe. I noticed something unusual which I had  not ever seen before in my years working with ...