Network Security

Hi,I'm trying to use qos to police traffic where a certain host should not go above 5Mpbs at any time and if the traffic is exceded it should be dropped.I have trying to play around with the below but the host machine can still access the full bandwi...

I feel this is a fairly easy straight forward problem. I have a NAT translation from inside,outside and it's to translate 449 to 443, translation is working great and this is all this public IP is used for. Problem is the device on the other end need...

I've been tasked with converting a Netscreeen fw to ASA 5520. All is well except for some of the fw policy where they have used fqdn for a host in the "untrust" portion of the policy. On the netscreen, you can configure a dns server and it will go ou...

Hi all,this is something not supported by Cisco any more. I would greatly appreciate if someone could advice me on this pleasePIX is in a Cluster as a Temporary solution. After implementing a new  SNMP server, gets SNMP alarm "SNMP GET_NEXT Loop Dete...

Hola a todos!!!Quisiera consultar lo siguiente; estoy configurando un Cisco ASA 5505 (Base Licence), ya tengo configurado el INSIDE, OUTSIDE y el DMZ en el outside he colocado mi IP pública, en el inside he dejado 192.168.1.1 (No he podido cambiarla)...

Hi all.  As I look at the thread headings fo rthe other posts I'm struck by how simple my request must seem I hope this is an easy one!  Using 891W routers, I would like to be able to save the running-config out the WAN port (gig0).  The most common ...

HiI want to  make ipsec vpn between ASA and Cisco 877 Router,crypto isakmp and crypto ipsec ACTIVE state its works fine but Cisco 877 can not ping ASA internet interface but can ping behind ASA PC,PC can ping 192.168.2.1 but Cisco877 can ping only be...

Is anyone else seeing a high frequence of "Cisco ASA 1000v Cloud Firewall H.323 Inspection Denial of Service" signature firing in their environment?  We are seeing this on several of the customer that we manage.Jon.

                   Hi all, this is my first post since I didn’t have to ask for help before.I'm experiencing a something weird with the new ASA 5545X. Here's the setup before I start. I have two switches and two ASA in active/standby as connected bel...

I try to SSH and get access denied.I try to ASDM and get "Unable to launch device manager from 172.16.252.100"I think I am missing something. Software is 8.4(5) and running in Transparent Mode.Inside/Outside are in bridge-group 1. No BVI is configure...

Just a quick question that I want to confirm.Customer has a ASA5540 at their main location and need a new ASA5500 for a DR site.Can I simply take a config file from an ASA5540 and easily drop it on an ASA5545-X or what ever?They are going to be using...

hello,I have a DNS name for the public ASA IPand I want use ASDM on the LAN with public DNS name or IP.With v8.2, I can use "alias", and it's Ok, but alias don't work on >8.4I try with "static" and DNS Doctoring.I can, but I loose access to the publi...

I have the system: Internal <--> Switch <---> Router cisco 2911 <---> ASA 5510 <---> ModemI built FTP server in internal, when i check FTP acccount in internal by IP FTP server -->okSo now i want to config FTP can access from internet. i have 1 IP st...

Hi!I need one DMZ server to access my inside network, but it does not work. I have made an access rule and the rule is working. Verified with packet tracer, packet tracer drops packet at the NAT step. The strange thing is that the NAT rule doesn't ge...

Hi there ... I'm a single ASA-5510 with CSC module ... I want to pair it for active/standby mode for failover .... can it be done if second ASA doesn't have the module? Can I assume the in case of a failover, the traffic won't be checked, and primary...