Network Security

HelloWe currently use old ASA-5520 which we replace with brand new ASA-5585-X. The 5520 is currently running 8.2.x and the target on the 5585-x should be 8.4(5).6. We use quite a bit of NAT, mostly with dynamic rules (assign a pool of external addres...

I've setup site2site and remote cisco vpn clients to terminate full (not split) vpn tunnels on our ASA5520. Does anyone know if the ASA can do IPS inspection and web url-redirection to an external content filter server (e.g. Websense server or WCCP t...

hello,Can Any1 tell me what is the ram of ASA Service Module?Thanks in advance Khem

Hi,The question is am I able to run dhcprelay for two separate networks?config like this:dhcprelay server  xxx.xxx.xxx.xxx INT1dhcprelay server xxx.xxx.xxx.xxx INT2dhcprelay enable insidedhcprelay enable dmz1dhcprelay timeout 60Thanks in adviceMarcin

HelloIs there anyone that face this recent vulnerability?http://tools.cisco.com/security/center/viewAlert.x?alertId=27927http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtc59462My understanding is that...

Hello, We recently attempted an upgrade from 7.2.4 to 8.4.5 and one of the issues we experienced was an issue with BT download can't through the firewall. Such as uTorrent(ver 3.3) .When open the software ，it display that DHT waiting to login in.But ...

Hi all,I have an Interface that is up/up but "show fail" reports "no link"Any ideas on what the cause may be? I am seeing input errors on the switch port this interface is connected to. Tried swapping the cable, but no change. I may have a hardware p...

Hello , i'm testing IOS firewall using zone based firewall zone pairs , users can access the internet , but i have a problem that i can't ping my external dns servers or even ping , trace any internet destination. For example ping to www.yahoo.com fa...

Hi All,We have 2 non-contiguous public subnets from the same ISP presented on a single routed connection. Behind this we have 2 ASA 5520's in routed mode, both have outside interfaces in the same public subnet and we have various devices NAT'ed behin...

Hi all,I have some issueI have to configure ASA with different line numbers but when i give line number its giving in sequence like 1,2,3, etc.Please advice any workaround can be done.

What is a good method for injecting routes into EIGRP on the outside of the ASA to advertise to my edge routers.The senerio is I have two edge routers running bgp to diverse providers.  These edge routers will be peering EIGRP with an ASA A/S cluster...