Network Security

We have a public address scheme that is a .224, so we have a handfull of addresses. We currently nat overload to distribute addresses to our users for the internet. But we use the rest of our addresses for web servers and such. I am trying to figure ...

10.18.20.X        <<<<<<<<ASA<<<<<<<<<          1.1.1.X(Web server here)                                                (internet)i have already test to open a port for public ip (1.1.1.1) and also internal ip (10.18.20.162)both of them can successfu...

Hi,I'm trying to activate the DMZ interface on a restricted license ASA 5505 but I get an error when I try to ADD the interface. The message says "With the current license device will only supports 2 fully functional interfaces. Third interface can b...

i can't do it with ASDM and try to use command but still failnat (inside,outside) source static inside-10.18.20.162 4F-1.1.1.2it is working fine for the above command if there is more than one public ip, in case 1.1.1.1 is for firewall interface publ...

Hi everyone,when we need to  configure DHCP pool on ASA we use commanddhcpd  address 192.168.50.3-192.168.50.192  interface xBut why we will use this option belowdhcpd address 192.168.150.120-192.168.150.120 int yNeed to know why we make a dhcpd pool...

I am new to ASA's and have just configured my 5505 out the box with an outside (10.10.1.7) + inside (192.168.1.1) IP & NAT. The ASA has got a default route to another router (default geteway) thats connected to the internet. I have it connected this ...

I'm trying to configure a transparent firewall.  I have been loosely following:  http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml  my management network is 10.10.0.0 while the connection I wan...

Internet ----  ASR ------ Switch ------- ASA 1 (active)                                         |              |                                       |              |                                       |---------- ASA 2 (standby)ASR supports BDI ...

Hi Everyone,I am trying to find the IP of network object.when i ran the command --sh run           object-group  network --- it showsobject-group network  XYZnetwork-object Cisco_1 255.255.255.0Need to find the IP of this Cisco_1?ThanksMahesh

I found the following rule on an ASA:Source        Destination   ServiceMarketing    any                 tcpDoes this mean that marketing can access any tcp service since it doesn't specify one (http-80 or https-443 for example)?When I move the mouse...