Network Security

Hello, Something strange with nat command the following nat command excellent works on ASA 8.4(2) but fails on ASA 8.4(4):nat (dmz,any) source static dmz_srv pub_srvI perform clear xlate, shutdown interface dmz    but with no success. p.s. i have cha...

Hi, anyone can tell me how do I verify if CG-NMS is enabled on ASA5520. I just need to know if it's enable/install to be enabled and used?Cisco Adaptive Security Appliance Software Version 8.0(5)28Device Manager Version 6.1(5)51Thanks in advance.

Hi Everyone,     I am trying to setup intervlan routing with a Cisco ASA 5510 and two 2960-S switches. The 5510 currently is using ASA Version 7.0(2) and has a base license. I tried to create a sub interface today based on some info I found regarding...

Hi All,I am quit experienced in Routing and Switching but new to ASA, I want to be real good with ASA and after that I want to write the Exam for Firewall. Please suggest me which way should I follow to get the full and practical knowledge about ASA,...

    Hi there, We have FWSM modules on Internet Edge 6500s. We have to replace them within a year as FWSM is soon EOL. We want to be able to replace them with ASA module or ASA Firewall. We also would like to have IPS on internet edge. We have an ASA...

I'm working this in a lab for now, but I am attempting to upgrade from 8.2(5.26) to 8.4(5) on a failover pair of 5510s and have encountered an issue with the zero downtime upgrade process.The whole thing appears to be very simple.  Upload the images ...

Hi,Is there any way I can ping the untrust interface of a Cisco ASA from my trust network? I am trying some options and unable to get this cracking.Is this something that will not work?Regards,Nikhil

Hello All,I have a Cisco ASA 5510 with a strange issue. When I power it ON, the following is the status of the front panel LED:Power is OFFStatus is AmberActive is AmberVPN is GreenFlash is OFFAlso nothing comes up on the console. I suspected a Power...

Hi All, we are having an issue with ASA sip inspection. here is our topology: CUCM-A --> ASA-A -- > ASA-B --> CUCM-B phone from site A calls site B, call is connected and media is being passed. when phone in site A puts the call on hold, the call is ...

Hello all,We've got a proyect that requires a few thin clients to connect to a remote PCoIP server.Looking to the documentation, the only port required to be open through Firewalls is TCP/UDP 4172, however, we've seen (making interface captures) that...

I have an ASA5510 that is connected to outside for WAN, inside for LAN (10.22.254.0/24), and a iSCSI switch plugged into Ethernet 0/3 (10.22.244.0/24). I can ping the Eth0/3 interface (10.22.244.1) but I can't ping across that interface from WAN or L...

I have an ASA 5505 running in a live environementin the past an RDP 3389 port forward was in place to allow external users to access the Terminal ServerWe then experienced a DDOS on RDP and instead of just deactivating the rules, they were removed. N...

All,               I have been seeing a large number of drops because of the DNS Inspect packet being too long. Does anyone have any suggestions? I have tried increasing the maximum message length but that does not seem to have any impact. Thanks!   ...