Network Security

I created a hairpin NAT statement on an ASA so that users can access an internal website using it's external IP address.  I'm able to ping the site from the workstations without a problem, but I'm unable to pull up the site.  It works fine externally...

We have two ASA's in Active/Standby mode.  We were using static routing on the ASA to reach the subnets off the inside interface but decided to switch over to EIGRP.   I got EIGRP working on the active unit but when I removed the static routes from t...

Hi allWe have on one side an administrative net (192.168.2.0/24), that have to reach hosts in some different VLAN's (192.168.26.0/24 and 192.168.8.0/24 for example) through a vpn tunnel. The problem is, that the default GW from the hosts in the VLAN'...

My requirement is I need to publish 2 Web Servers to internet behind Cisco ASA. The users will be using secure https acccess to the Web Server.I have only 1 Public IP Address assigned to access both the Web Servers.Wanted to know what are the things ...

Hi I need to route mail on port 25 through a Cisco ASA 5520 to 2 separate servers.  I have one set up already which works fine but am introducing the second one now. The mail will be coming from "any" so I cannot tie it down by source. I have a block...

case closed

What's the best practice for deploying ACS in a multitenant environment.  I see some people are using an open source version of TACACS+ for this purpose.  Any thoughts?

We can create an HTTP Inspect policy map and under the parameters configure it in such a way that it should spoof  the HTTP Banner however when it comes to HTTPS server ASA doesnt support HTTPS filtering therefore we wont be able to spoof the header ...

     I have two ASA5510. I want to make failover between the two firewalls. However, when I use the command "show version", the display shows that the Failover is disabled. Anyone can help me?     Here is the output of "show version":Licensed feature...

Hello ,I am migration from PIX 515E to ASA 5525X  running version 8.6(1)2 .The company uses pix as its Internet GW to the ISP ,behind the PIX there's a Cisco 3845 (C3845-ADVENTERPRISEK9-M), Version 12.4(24)T1, RELEASE SOFTWARE (fc3)  Both devices are...

               Hi,does any one know if IPS provides any solutions to scan DLP functionality against MTLS encrypted traffic ?Thanks

                   Hi alll, I'm fairly new to the ASA-SSM-10 platform and a bit confused regarding lisencing requirements. I purchased the device 2 months ago from a reseller in Canada. I've just began installing/setting it up. I have not bought any ...

Hi there,We are using an ASA5100 on 8.2(5).  I'm trying to look at granting access to our internal webserver to those connected to our guest network using an external DNS server.  I've enabled DNS inspection but can't seem to get the doctoring setup ...