Network Security

Hi ,I have to migraste current IOS conditional NAT to our new ASA 5515x.However the NAT misses the possibility to define it via access lists.I've found something about the twice NAT, however i didn't find the way how to implement it.Here is the curre...

Hey folks, i desperatly need some assistance with my ISR 800 series router zone based Firewall.The router is currently setup and routing traffic to the internet successfully.I would like to setup a custom inbound port(TCP-3389) accessible from the in...

I tried this many different ways but either I'm hitting a bug or I don't understand the concept completely. Either way please let me know what I'm doing wrong. So here's the scenario..I'm looking after a firewall in a DC catering multiple clients. Ea...

Hi!It feels like I have been beating my head against the wall for three days now. I finally think must accept I have bitten off more than I can chew.My situation: I want the ASA to have a static IP internally, act as an internal DHCP-server, and on t...

Hi Everyone,I  am pinging from switch connected to  outside interface of ASA  to the PC connected to the DMZ interface of ASA.Switch had static route to the DMZ PC subnet.Also ASA has ACL thats allow ping from  outside to DMZ  interface subnet ---192...

Hi Folks,                   Can anybody comment on the below.1.  in source natting (inside users accessing internet), first the NAT will happen then the routing will happen. I agree with this..2. in destination natting (outside users accessing inside...

Hi Folks,Does any ASA firewall crashes with crashinfo generated due to HARDWARE problem ??According to my knowledge, the crash occurs if there is a bug in the running version of image.So far I have seen a firewall in standby crashes due to dispatch i...

Hello,I am new in the Cisco world , learning how everything goes. I have a Cisco ASA 5520 firewall that i am trying to configure, but i am stumped. Traffic does not pass trough interfaces ( i tried ping ) , although packet tracer shows everything as ...

Hi,I have an ASA 5505 that has 2 route (1 route connecting to MPLS VPN to HK branch office and 1 route connecting to Internet service provider). As you know, ISP in China blocking many web sites (such as facebook, youtube or etc.). So , I would like ...

I have got a new ASA 5512 appliance for VPN. Is the managament interface on this applaicne is out of band? Thta is: can I use this interface exclusively for administration of the appliance?