Network Security

Hello!I have my computer behind ASA dynamic nat:object network obj-192.168.22.229 host 192.168.22.229nat (inside,outside) source dynamic obj-192.168.22.229 interfaceAll works OK, and I have hosts with static nat, they work too.then I need to give acc...

Hi everyone,I don't know how to config on my ip range (192.168.172.0/24).object network FULL-IP-INTERNET "(allow full internet)range 192.168.172.1 192.168.172.20NAT (inside,outside) ...Access-list ....object network DENY-IP-INTERNET "(limited interne...

I have a little bit of confusion on implementing global address pools and PAT.  I want to do a many to one translation.  I have a FWSM that has a /24 network bound to an interface for guest wireless.  All I want to do is use private IP addressess and...

Looking at the changes in NAT syntax after the upgrade.... how would I do the following in 8.3+?1)access-list Encrypt extended permit ip 172.10.35.0 255.255.255.0 172.10.18.0 255.255.255.0 access-list Encrypt extended permit ip 172.10.36.0 255.255.25...

Hello all,I understand that in transparent mode an ASA5510 would only be able to have two interfaces, inside and outside.My question is could one of those logical interfaces be an LACP'd interface, made up of two physical interfaces. Topology below.I...

Good Morning All,I am confiuging a DMZ on my ASA 5510 but I have run out of physical ports, since I have dual Wan ports configured.  I plan to implement a DMZ using subinterfaces.  I have 2 questions:1) Do I need to configure a Vlan to complete this ...

Hey Folks,I would appreciate any feedback I can get on this.  I recently added a business cable modem to help relieve some of the conjestion I was getting on my T1 for our MPLS network.  There was an ASA 5510 collecting dust in a closet here and I th...

HiIm new to the ASA firewall. With no ACL's configured Im trying to ping from a host in the inside to a host on the outside. Pinging from  a level 100 to a level 0. This is permitted and I realize that I would have to create an ACL to permit icmp pin...