Network Security

Hi,I would like to config "when host X on vlanX goes to a network that is across an ipsec tunnel, for which vlanX network is not in the encryption domains, translate host X address to that of the asa in a network that is part of the crypto domain".In...

Hi,I just managed to completely screw all our tunnels when trying to configure l2l to allow a remote peer with dynamic address to form a tunnel with me.I'm pretty confident that my dyn map kicked in on every tunnel, and then the phase 2 would fail be...

Hi everybody I am just trying to understand how Cisco's security products evolved so I can better understand themThese are some questions I have:1)  Before PIX came along, what Cisco product we  used and what security features we could implement with...

Hi Experts,My setup is as belowinside host--> ASA1--Outside interface- layer_ 2_Switch1--outside interface--> ASA2--inside interface-DHCP SERVER.We want that inside host should get ip from subnet 192.168.10.0 /24. This ip pool is configured in DHCP s...

HI everybody.I have few questions.policy-map type inspect PING class type inspect PING  inspect class class-default  pass1)What is the order of operation?  The" inspect"  action will apply only to class " PING" . The action " pass" will be applied to...

Hello, I have two ports I want communication between and I feel like it should work but still even pings fail. Below are the relevant entries from the running config. Any idea what I'm missing? Thanks. P.S. (1) Because wouldn't let me post otherwise....

how to block specific ip address to use facebook and youtube in ciscoISA 500 series firewall?please answer with step by step i am new about it !

Hello Support community,I'm looking to simplify some of the nat commands that I need to use, and I would like to ask, is it possible to map 2 real ports to 2 translated ports using a single nat command? for example, I have a web server in DMZ hosting...

I was asked to create rules with the following TCP ports: 41000, 41002, 41025. Since these ports did not exists, I just created new TCP service objects. The issue is I put the those ports as source port/range and destination port/range in the Add Se...