Network Security

Hello, I am trying to add 89,462+ access list rules to an ASA 5510 running 8.2(5). I have added all the rules to an object group and when I try to apply the access list to an interface it gives me the foolowing error:ERROR: Cannot add policy to rule ...

Couple questions on show with include1. Can you do a show command with include and a space meaning can you search for say "permit ip"?2. Can you do a search for an exclude say "show access-list | exclude eq"?                  

I have two ASA 5520s in Active/Standby. I try and test this quartely to ensure it is working correctly. Everything works fine, except I have an issue with one interface. When doing a show failover, it shows the interface as failed on the secondary un...

Hello,I'm implementing a project where will have a DMVPN in a hub-spoke topology with ZBF on spoke ISR G2 routers. The CUCM will be in Data Center behind Hub Router.I tried to configure ZBF in spoke routers allowing just signaling protocols to CUCM l...

I am using an ASA 5510 firewall in routed mode.How can I filter incoming traffic by mac address on the AS 5510 ?I have already setup a static access rule for rdp users on the outside to access a terminal server on the inside.Now, i would like to furt...

Hello dear all,I need to log HTTP post request to webserver standing behind asa firewall, BUT I need to log variables that are inside the post request. I am able to match method post and request body that contains the request and the variables itself...

I have a server on the inside of my network (with a internet Routable IP).  It has been requested to me that people from the internet access port 80, and that is translated at the firewall to port 7080.  I have set up a temp Access rule to allow acce...

In pre-8.3, NAT had a group number to match nat to global.How do I do this in 8.4?  I need a default pat (0.0.0.0), but I also have specific pat for certain subnets.  How do I keep them from overlapping?  Will it check more specific nat statements fi...

I have two ASA5520's with ASA-SSM-10 modules which are running Cisco Intrusion Prevention System, Version 6.0(6)E4. These are located at two different sites (one is local and the other remote from where I am based) and so are not running failover.I u...

Hi,We have a server in our LAN. It connects to a Juniper firewall , this inturn connects to an ASA which acts as the internet firewall.LAN Server 10.96.1.90 needs to connect to an external destination 81.20.97.19 for ftp service as also the external ...

Hi, can someone point out where I am going wrong.  We have the following topology and want to be able to connect ServerA to serverB on port 80.  Pretty standard stuff.  We have the following configint-asa-contextaccess-list nat0_list extended permit ...

          I am not a firewall person, but have to configure asa 5510 because of snow storm.          I set it up with asdm, i can not get out to the internet, here is my config, thanks!