Network Security

Resolved! Needs help to ping out of ASA 8.0.2

Hi All,I need help to ping through firewall. Please help me. I am getting this error while trying to ping outside:Result:input-interface: insideinput-status: upinput-line-status: upoutput-interface: outsideoutput-status: upoutput-line-status: upActio...

ASA5515-IPS-K9 Integration Design Query

Hello,Came accross a slighly different and odd design today. Customer had:-Internet----ASA(x2)----Internal NetworkThey now have purchased an IPS applaince and their proposed design looks like this:-Internet----ASA(x2)----ASA5515-IPS-K9-----Internal N...

Resolved! Zone-based Firewall - Allow "established" flag?

We are implementing the ZBFW on our edge routers, connected to to ISPs with BGP routing. I have copied the basic policy from another site but that site has very few if any outbound connections. What I think is happening is, the traffic goes out to ...

Resolved! Static Nat for sending syslog messages to remote site.

Hi Everyone,IF we have two sites and each site has syslog server.Site ASyslog server IP 192.168.50.1ASA 1 Site BSyslog server IP 192.168.60.1ASA2for redundancy purposes ASA at each site will send all syslog messages to syslog server at its site a...

Resolved! ASA 8.4 static NAT statements.

Hello,I have 2 servers with static PAT configuration in pre 8.3 ASA:Server1 - 10.6.1.10 - PAT to 66.66.66.66 for SMTPServer2 - 10.6.1.20 - PAT to 66.66.66.66 for IMAP4 and http/httpsPub address - 66.66.66.66 old config:1. static (inside,outside) tcp ...

ASA 8.0 NAT conversion to 8.4

The existing statements that I have a question about in 8.0 are:global (outside) 3 interfacenat (inside) 3 0.0.0.0 0.0.0.0nat (inside) 0 access-list nonatnat (inside) 3 access-list inet_natThe nonat and inet_nat access lists are:access-list inet_nat ...

Packet treatment by asa

HiI have the following question. I have a 5525-X and in one DMZ a couple of ISA servers with load balancing in unicast mode (that means that both ISA server have the same MAC).When another machine (in the same DMZ) tries to send a packet destined t...

ASA with a secondary route via IPSec (ospf?)

Hi,I have a simple requirment that I am hoping somone can kindly validate.Running an ASA firewall, I would like to achieve the following:I would like to setup two external routes for my firewall. The primary/default would use the outside interface. S...

Resolved! ASA5505, SYN attack, ISP and IPS module

Our 5505 is currently being hit by a SYN attack from surprise, surprise, China. The attack easily brings down the 5505 by hitting the 10,000 connection limit of the box. I am currently using the shun command to try to mitigate the problem but it is...

NAT - Multiple ports translated to single port - ASA 8.4

Hi,We are migrating from a nother brand to an ASA Cluster running 8.4.5We have a web-server on an inside interface listening on a non standard port - 20111. We have created a static NAT translating the public ip to the private, so If I do http://publ...

ASA 5540 VPN Premium

Hi,I have a ASA 5540 VPN Premium with 2 Clientless licensesHow many anycoonect users can i accomadate with concurrent sessions ??Thanks

a fake IP

We have a subnet(within public IP addrss) that is drop (into Null0 interface) from our core switch in the Inside network. Therefore pinging it results destnation not reachable. however some company outside in the network compains to us that there is ...

ASA 5540 - 3000 simultaneous IPsec connections

Hi all, We are planning to use an ASA 5540 to terminate about 3000 IPSec connections. The maximum supported IPsec VPN Peers for this platform ist 5000, so this should be ok in theory. What is a bit unclear to me is what exactly happens when (for what...

Resolved! NAT problem help!

Hello guys, I hope some one can help me out here. I have Cisco ASA 5520 with a 8.4 code in GNS3. I have a problem pinging to the internet. On the ASA console, I can ping to outside world, but on vpc I cannot ping the outside world. But I can p...

ASA dhcpd address restriction

Hello.I have a question on ASA dhcpd address restriction.I've noticed that maximum available DHCP pool is restricted to 256 addresses.http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/basic_dhcp.html#wp1125257Is it merely the res...

Network Security

Forum Posts

Resolved! Needs help to ping out of ASA 8.0.2

ASA5515-IPS-K9 Integration Design Query

Resolved! Zone-based Firewall - Allow "established" flag?

Resolved! Static Nat for sending syslog messages to remote site.

Resolved! ASA 8.4 static NAT statements.

ASA 8.0 NAT conversion to 8.4

Packet treatment by asa

ASA with a secondary route via IPSec (ospf?)

Resolved! ASA5505, SYN attack, ISP and IPS module

NAT - Multiple ports translated to single port - ASA 8.4

ASA 5540 VPN Premium

a fake IP

ASA 5540 - 3000 simultaneous IPsec connections

Resolved! NAT problem help!

ASA dhcpd address restriction

Cisco FTD/FMC IPsec Tunnels: “Up” Doesn’t Always Mean Working

Cyber Vision Sensor version

FTD 7.2.5.1 → 7.6.2 Upgrade sftunnel TLS Failure — Certificate Mismatc

Suppress Closed Responses on Non Existent TCP/UDP Ports

FMC Upgrade to > 7.4 || 7.6

How does BGP flowspec work

FTD to AWS VPN gateway IKEv2 phase 1 lifetime mismatch

IPs needs to excluded from protected network Site to Site VPN on FTD

FTD HA Pair - Config Sync Status: What does "Sync Skipped" mean?

FTD Route Based VPN question