Network Security

Hi gurus of Cisco.Could you explain me please, what meaning this line:!First Natglobal (outside) 101 36.161.215.110 netmask 255.255.255.255nat (inside) 101 0.0.0.0 0.0.0.0!Seconf Natnat (WAN-Inside) 0 access-list WAN-Inside_nat0_outboundnat (inside) ...

We’re currently (and have been) able to log VPN access through our firewall for our IPSEC clients via RADIUS in MS InternetAuthentication Service (IAS) on our domain controller.  However, moving forward with LDAP authentication, we need a replacement...

Hello I am looking for a documnet which list the security attacks and signtures that the ASA 5555+ IPS can defend from . such as - Syn Flood, UDP Flood, ICMP Flood, IP Address Spoof, IP Address Sweep, Port Scan, DoS and DDoS, Teardrop Attack, Land At...

Hello to you allI have a very big ACL I want to implement (over 1000 lines), and I´m trying to minimize the impact and latency an ACL this size would bring to the network, so I wanted to group my networks and services into different object and servic...

Figured out issue.  Nothing to do with the ASA as usual.

Hi All,1> Created two NT groups in window VPNusers Networkusers2>created two group in acs such as Routernetworkadminswitch networkadmin.3> Mapped vpnusers with routernetworkadmin   mapped networkusres with switchnetworkadmin4> Created two NDGCoredevi...

The group policy we are currently using for anyconnect is assigned to only use sslvpn client as the tunneling protocol. Whenever anyone connects directly from anyconnect it shows them as a clientless session. Any ideas on this? Needing this fast if a...

Dear Team,I am having multiple vlans in my organisation. My organisations is divides into 4 floor. Each floor is contains the multiple vlans. I want to configure the complete redundancy. Can you please suggest the network topology for the same?

I'm currently using the Inspection Engine to prevent most users from accessing .zip (and the like) files.  However, this also blocking some websites used during daily business.  I keep getting the following or similar syslog message:%ASA-4-507003: tc...

I am having trouble getting my L2L VPN between two sites working.Site 1 ASA 5510 - dynamic outside interface IPSite 2 ASA 550 - static outside interface IPWhen I do a static to static it works just fine but since the outside interface will change eve...

Hi,Need some help with PAT. I  want to use a different public IP address for NAT from the one assigned to the "outside2" interface. Below are the configs that I have used. When I am running "Config - I" (please see below) everything is fine, i am abl...

Dear support,Our client has previously purchased the ISA 550 and would like to aggregate 2 HDSL links to benefit from load balancing and redundancy.Kindly advise if the ISA 550 is capable of thatRegards

Hi everyone.I configured to ASA transfering syslog messages to syslog server by TCP.I checked logged messages by "show logging " command, messages continiously occurerd.But ASA didn't tfansfer all of messages to syslog server.I can see ASA to work fo...

Hi All,Anyone face problem with their ASA5512 with the following behaviour?The firewall hang after a period of time like 15days and above & required to reboot the firewall. All interface is still PING able from either outside, inside & DMZ. However, ...

    I have a question.     Does ASA5515-X support ASA-SSM-CSC-10-K9=? If not, what module does ASA5515-X support instead of ASA-SSM-CSC-10-K9=？