Network Security

Hi some time ago we restricted access to our webvpn portal via the following aclaccess-list outside-control-plane remark Allow VPN Access From Officeaccess-list outside-control-plane extended permit object-group Net_Access object BCH_Man_Range anyacc...

Hello,Does the ASA treat an object-group with a network-object containing a range of IP addresses as a netmask? For example, I can apply this configuration without the ASA throwing any errors though the configuration calls for a 'net mask':object-gro...

I'm trying to figure out how to forward an IP address to my DMZ servers allowing me to use the ACL to control access to the servers within my DMZ interface (LAN).  I can't figure out if the ASA handles that automatically when a NAT rule is created, o...

From what I can find the ASA does not support policy routing so I'm stumped on this. I have two VLANS that need to go to the same destination but different routes. Anyway to accomplish this on the ASA?

A few questions:1.  Is there a rhyme or reason on what is posted on CCO under the "Latest Releases" header? Right now, it has 9.0.2.ED, 8.4.5.ED and 8.2.5.ED listed (but not 9.1.1.ED).  Instead, 9.1.1.ED is listed further below under "All Releases". ...

                   Hola que tal, un cliente requiere de un esquema en donde un ASA 5545 se pueda implementar con un FortiGate en una red para un esquema de alta disponibilidadAlguno de ustedes ha visto algo similar? Conocen de cuales serían los reque...

Hi everyone.I need to check if our ASA  allows access to IP 192.168.x.x  which is DNS  server at remote site.I try the packet tracer  and choose the interface and source and destination IP.What  source and destination port i choose while using the AS...

I am trying to test something for a client.  If I have an ASA that receives two default routes to the internet via OSPF, will it load balance those connections?  I have a feeling the answer is 'no.'  If that is the case, would the ASA would be at lea...

Hi there,I want to connect a windows 7 machine (A) to a SLES server (B) located in a physically different location. However I don't want A to be reachable by any other machine.The only way I can see to do that is to put a hardware firewall in front o...