Network Security

Last Night my users were unable to surf the web, other services, such as email and FTP were available.  I eventually noticed numerous "Shunned Packet" warnings when examining the ASA_5520 Syslog for the time period in question.For example:2013-09-22 ...

Hi all,I would like to setup a SPAN port on my outside interface on the ASA 5505.  I would like to see all traffice whether inbound or outbound.  Setting up a SPAN port seems pretty straight forward, my question is, if a packet hits the outside inter...

Cannot get a static route to work for a single IP to go out of failover ISP gateway, we have tried just about every method of the static command we can think of as well as adding lower metric route's for single IP, etc... no luck, traffic always goes...

Dear Community.I'm trying to track some static routes via the outside interface and do not want to install a backup route when the static route fails.If tracking failed can the static route be removed from ASA firewall all together, which is redistri...

Hi Team,I manage 2 ASA 5520 on HA in 2 sites. Behind each locations, configured 6 zones on 2 of ASA interfaces. I have a requirement to enable multicating between the VLAN situated under common physical interfaces,different interface on same ASA and ...

We have just taken delivery of a new 5512, I need to be able to setup the management interface to be accessed via a public IP so i can remotely configure it. We have given the management interface the IP but cannot access it, can someone help me?Murr...

i have the interface on disabled in my context, but i have no option to delete the interface, only edit as optionwhen i go to the system context i click my specific context/firewall and click edit, and scroll down to the interface i want to deletei p...

I have ran into a problem with my Polycom behind my ASA5510. I cannot receive calls from the outside and when placing calles from inside to outside the connection completes and my audio/video reaches the outside but no audio/video is returned through...

Hello,We have had a VPN operational on our Endian Firewall which uses OpenVPN server on port number 1194.  We recently purchased a Cisco 5520 ASA to put in front of our Endian Firewall and I am still hoping to use our current Endian Firewall VPN serv...

Hi,I'm trying to configure Kerberos authentication on ipsec-l2tp vpn tunnel. However, when I use my domain user to establish a connection I get this error:ASA-Oslo# kerberos mkreq: 0x176kip_lookup_by_sessID: kip with id 374 not foundalloc_kip 0xd9b9b...

Hi,I'm setting up 2 ASAs in failover mode. For added availability I'm using Redundant interfaces.Ethernet0/0 is a 1Gbps interfaceEthernet0/2 is a 100Mbps interfaceBoth are combined into Redundant1The same is ddone for the other 2:Ethernet0/1 is a 1Gb...