Network Security

Hi,I have failover pair of ASA boxes without configuration of stateful failover. There is only basic LAN failover.I want to add stateful failover configuration using dedicated interface of ASA. Is this with downtime zero when I will add command for s...

Hi,I have 2 cisco asa 5540's configured in active/standby mode. I need to change the hostname and domain name as per our standards. Does changing the hostname has any impact on the traffic flow?Thanks,Sridhar

Hi,Due to increase of demands on our ASA cluster, we need to upgrade to a new cluster of 5545x. Our current config contains a lot of S2S & NAT so we're quite worried :-)Thanks!

Hi,i have  cisco  ASA5510  Firewall and  configured   one  site to VPN . i  want  to   configure  another  s2s vpn  in  the FW for  another   Site location.please advice  what  to  in the existing  Firewall  so that  2  site to site  vpn  can work.Th...

Hi ,I hope that you guys can help me to understand FWSM license information I'm a newbie on cisco firewallsFWSM License information is as follows :FWSM# sh verFWSM Firewall Version 3.2(2)FWSM up 6 days 8 hoursHardware:   WS-SVC-FWM-1, 1024 MB RAM, CP...

HelloThis is my first post in this forum. I haven't found an answear to my issue, so I decided to open a new discussionWe take care of 2 Cisco ASA 5580 (primary/secondary) working as usual (active/standby). Image version 8.2.5.Today I found that the ...

I have the following scenario:We have two edge firewalls with Active/ Active setup connected directly to two core switches. New two IPS sensor s4260 are required to be connected inline between the firewalls and core switches. What is the best practic...

Hello all,I have 2 data centers conencted via WAN and each has their own Internet conenction.  One of the site's Internet is close to maximum bandwidth and we want to use the second site's Internet for future connections.  The problem is the core swi...

Hi All,I have vlan say 10.0.0.0/24  which is patted with public .With a same vlan i have created site to site vpn with the client  But I have not used nonat for the interseting traiic do it work ?

Hi!I wish someone can help me on this, I'm a new guy on cisco firewalls and I'm currently implementing cisco asa 5512x, here are the details:ISP ->  Firewall -> Core switch -> Internal LANafter installing the cisco asa and terminating the appropriate...

How can i create customized user in Cisco ASA 5505 having the following Privileges? note i dont have AAA server.User can only perfrom show runing, ping, traceroute, show xlate.Second Question is, I have review one of the firewall configuration and fo...

The following does not help:ASA# sho run object-g | in 1433port-object eq 1433service-object tcp eq 1433 port-object eq 1433ASA# sho run object-g service | in 1433              port-object eq 1433service-object tcp eq 1433 ASA# sho run object-g | be ...

I have this setup:outside <-> [ASA] <-> inside (10.21.30.0/23) <-> [router] <-> inside2 (10.21.40.0/23)I added this:static (inside,outside) tcp 1.2.3.180 www 10.21.41.100 www netmask 255.255.255.255access-list main_acl extended permit ip any host 10....