Network Security

Resolved! ASA 5520 getting below error while getting replication from primary firewall

Hi I have configured the primary firewall every thing seem to be fine, And we have configured failover device while config is getting replicated to the failover device we are getting below error. ERROR: Cannot add policy to rule engineERROR: Unable t...

Resolved! ASA 5510 / PAT / ICMP echo outgoing IP

Hello guys,I have ASA 5510 with soft version 8.4(5) installed.There are two interfaces:IP 1.1.1.1/24 - insideIP 2.2.2.1/24 - outsideI have configured PAT, so network 1.1.1.0/24 gets NATted to 2.2.2.2 address. Everything works fine, except I can't rea...

Resolved! Access natted public ip address

Hi all,on my ASA5510 I have a server with an ip address of 192.168.0.210 natted on public ip 91.xxx.xxx.190 on port tcp 2120. There is the possibility to reach the server from the inside LAN with a public IP exposed (91.xxx.xxx.190) and not the int...

ASA 5520 ASDM Failed to Launch

I have new ASA 5520 from the box and i have configured already int g0/1 with ip 10.15.14.5 255.255.255.0 nameif inside kindly see details below the configCiscoAsa# sh run httphttp server enablehttp 0.0.0.0 0.0.0.0 managementhttp 192.168.1.0 255.255.2...

A10 networks with Cisco ASA 5540

Hi there,I have a question about Cisco ASA 5510 behind an A10 balancer.Today I have an ASA 5540 providing VPN Ipsec Site-to-Site for 4 diferents partners. My company decides to by an A10 balancer to work with multiple ISP, today we have just one lin...

how to convert 3 group mac address (xxx.xxx.xxx) to 6 group (xx-xx-xx-xx-xx-xx) on asa 5505

hi everyone i am quite new to asa so, question might sound silly to many of you but i really need help, here is the scenario .. Recently i bought asa 5505 to practice for my exams and i failed to connect to internet since my internet provider binds I...

Resolved! ASA 5505 and OSPF

I am setting ip OSPF in my lab and I have all my routers working great with it. I wanted to toss my ASA into the loop, but for some reason I can't seem to get my ASA to work with OSPF. Can someone take a look at my config and help me out?ASA 0/3 --...

Resolved! Missing traffic log on ASA

I have two ASA form a cluster and part of configuration as below the number of hit count of this ACE is very very large, so that i suppose to receive lot of log on ASDM and log server, however, i found that i can just receive part of log, yes PART...

Resolved! Upload file from TFTP and get this error "This image is not valid for this platform"

Hi guysTrying to upload a new IOS for my CISCO ASA using TFTP I get the next errorAccessing tftp://189.206.211.24/asa825-33-k8.bin...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!%Error copying tftp://189.206.211.24/asa825-33-k8.bin (This image is not valid fo...

Resolved! testing 5515x at home, no internet route

hi all,im new to cisco asa and the model is 5515x with license plus. below is my config at home,~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ciscoasa#ciscoasa# sh run: Saved:ASA Version 8.6(1)2!hostname ciscoasadomain-name test1.comenable p...

Resolved! Firewall Logs

Hi everyone.Here are logs from the ASA when i open up google.com192.168.10.3 Apr 15 2013 20:28:55: %ASA-5-304001: 192.168.20.17 Accessed URL 74.125.28.94:http://www.google.ca/192.168.10.3 Apr 15 2013 20:28:54: %ASA-6-302013: Built outbound TCP connec...

Resolved! Enable traffic through the firewall without the address translation

Hi everyone,On ASA ASDM under config,firewall NAT rules there is option at bottomEnable traffic through the firewall without the address translationNeed to know what does it mean?Does it mean that if user with private IP comes to ASA then A...

Allow incoming dhcp requests

We are a small ISP and I would like to move our dhcp server inside our firewall and only allow dhcp and icmp to the server. It appears that when I allow it through the access-list and NAT that the requests get to the server and the server offers an I...

Pix501 and dmz translations

Hi all,I have been remotely trying to troubleshoot a site that i just inherited that is running a Pix501, version 6.0(1). I'm not allowed to gain access to the machines on the network, nor the pix itself for remote access so I can't test anything. ...