Network Security

I'm curious if there is a way to stop tunneling applications out HTTPS with ASA 5500. I know everything is encrypted but is there a way to at least inspect the traffic to make sure it complies with RFC 2818? Perhaps there's another way to provide som...

Hello Basically after upgrade from ASA 8.4 to 9.0 (2) I have problems when certain types of NAT.Example:ASA 8.4:      nat (LAN, outside) 85 10.252.253.123 source static 192.168.3.2 192.168.3.2 192.168.3.104 static destination service http http In thi...

I've upgraded some old PIXen to ASAs running 9.1(1) in the past few months, and have seen plenty of these:Apr  8 16:33:32 myasa %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 13 per second, max configured rate is 50; Current a...

Hello,I'm trying to configure some firewall rules and a nat in our pix 525 and I'm having some issue with the connectionHere are the details:172.40.40.40 destination host.1.- I configured an ACLACL test 172.80.0.0 255.255.0.0 destination 172.40.40.40...

I'm trying to achieve a site-to-site ipsec tunnel to a Cisco ASA 5520.  Most examples feature the ASA with a public interface that terminates the tuennel and a private network on another interface that the tunnel interacts with.  Where my scenario di...

Here is the scenarion:- would like to route any internal traffic thats SMTP based only to internal email server ( x 2 ) - The default gateway is already set on the email server to go out the outside interfaceCan this be done on an ASA, I am thinking ...

Has anyone experienced a slowdown in VMWare (v5) VDI with PCOIP screen refresh rates when the traffic goes through a Cisco ASA firewall (version 7.? - I'm not at work as this question came to mind.)  Any special commands one might be able to put in p...

Hello, Something strange with nat command the following nat command excellent works on ASA 8.4(2) but fails on ASA 8.4(4):nat (dmz,any) source static dmz_srv pub_srvI perform clear xlate, shutdown interface dmz    but with no success. p.s. i have cha...

Hi, anyone can tell me how do I verify if CG-NMS is enabled on ASA5520. I just need to know if it's enable/install to be enabled and used?Cisco Adaptive Security Appliance Software Version 8.0(5)28Device Manager Version 6.1(5)51Thanks in advance.

Hi Everyone,     I am trying to setup intervlan routing with a Cisco ASA 5510 and two 2960-S switches. The 5510 currently is using ASA Version 7.0(2) and has a base license. I tried to create a sub interface today based on some info I found regarding...

Hi All,I am quit experienced in Routing and Switching but new to ASA, I want to be real good with ASA and after that I want to write the Exam for Firewall. Please suggest me which way should I follow to get the full and practical knowledge about ASA,...