Dear All,Am not conversant with Firewalling.however i have need to set up CISCO ASA 5585 out of the box.i would like if any body could guide me through the initial and final installation steps.Jude.
Below is output from a config running on my VPN router (ip removed for security purposes).crypto map NMI-VPN isakmp-profile NMI-ISAKMPcrypto map NMI-VPN 10 ipsec-isakmp set peer X.X.X.X set transform-set AES-SHA set isakmp-profile NMI-ISAKMP match ad...
Hello Guys...Im having problems with nat after upgrade....source = 10.11.7.14destination = 10.0.32.10the next hop for 10.0.32/24 is 10.0.5.1, by inside interface. My firewall Pings this 10.0.5.1. When I change the router to doesnt pass by firewall, t...
Hi,I have a cisco ASA 5510.I have a public Dns entry for a service thats say service.domain.com.the DNS entry for this is the same IP that computers in one office access the internet on. Computers can see the local IP of the server that runs this s...
Hi guys, I have questions on how to allow connections or in this case just ping, between R1 and R2 with ASA in the middle (R1-g0/0 and R2-g0/3). Below is my setup, this is a simple one but I couldn't make it work, I am just trying to set up the ASA t...
Some others who face this challenge?We have not found a solution that can replace the CSA, but would love to hear if there are some who have found a solution.
I'm trying to import an ASA 5505 into CSM and it works up until it trys to import the VPN's and then displays the message below.Message : Incomplete Remote Access VPN ConfigurationSeverity : WarningDescription : There is no dynamic crypto map applied...
I have a client that has a Cisco ASA 5505 on 8.4 and needs to do DNS Doctoring. They have a /30 public IP range, so they only have one IP on their outside interface that we PAT to any inside services, such as an e-mail server or RDP access.DNS Re-wri...
I have a network 192.168.1.0/24 sitting behind ASA 5505 running version 8.2(1) with this configuration:interface inside 192.168.1.254/24interface outside 192.168.2.1/24nat (inside) 1 192.168.1.0 255.255.255.0global(outside) 1 interfacefixup protocol ...
Hi GuysThis is probably a simple question with a simple answer I have servers in my private network that need to communicate with servers in my DMZ on port 1080. I have created a static NAT rule and then edited the rule as part of a lockdown so that ...
hi alli have working 5510 with some NAT and access lists configured. I use secplus license on 5510. Now I want to move couple of interfaces from 100 to 1000 port without lose of configured rules. if I try to remove existing interface and create it on...
Hello everyone forgive me but i am trying understand the ASA firewalls more i come from a router zone based firewall background but the ASA seem to have less advance firewall?the ASA seem to reply more on ACLS were the ZBR seems to use the class map ...
Hi,I dont know if this is a best practice and the ideal way of doing it but i want to give it a tryIn the diagram, i have my current network setup as shown in the left. I want to configure it as shown in the rightSo im thinking, Create a port channel...
