Network Security

I have a server on the inside of my network (with a internet Routable IP).  It has been requested to me that people from the internet access port 80, and that is translated at the firewall to port 7080.  I have set up a temp Access rule to allow acce...

In pre-8.3, NAT had a group number to match nat to global.How do I do this in 8.4?  I need a default pat (0.0.0.0), but I also have specific pat for certain subnets.  How do I keep them from overlapping?  Will it check more specific nat statements fi...

I have two ASA5520's with ASA-SSM-10 modules which are running Cisco Intrusion Prevention System, Version 6.0(6)E4. These are located at two different sites (one is local and the other remote from where I am based) and so are not running failover.I u...

Hi,We have a server in our LAN. It connects to a Juniper firewall , this inturn connects to an ASA which acts as the internet firewall.LAN Server 10.96.1.90 needs to connect to an external destination 81.20.97.19 for ftp service as also the external ...

Hi, can someone point out where I am going wrong.  We have the following topology and want to be able to connect ServerA to serverB on port 80.  Pretty standard stuff.  We have the following configint-asa-contextaccess-list nat0_list extended permit ...

          I am not a firewall person, but have to configure asa 5510 because of snow storm.          I set it up with asdm, i can not get out to the internet, here is my config, thanks!               

Hello , We have a Cisco ASA 5520 and im looking for a way to monitor largest outgoing and incoming traffic per ip in real time so to know which of my internal computers are using the most of our Internet Line. Is there a way to this through ADSM ? We...

Good morning,I currenty have a Cisco ASA 5510 with a SSM-10 card installed but have no IOS image on the Internal flash card,How do i obtain the latest IOS and how do i go about obtaing the liecence for th SSM-10 card.RegardsPaul

Hi, I need help on clarifying how ACLs and object-groups work. I don't have extensive firewall knowledge so I'll try to explain it as clear as possible. I have read that basically everything can be an object-group (e.g. "object-group network" "object...

Hi This is my config below. The error i am recieving is crypto map entry is incomplete. Can someone please take a look and let me know.  Thank youASA(config)# crypto map outside_map 1 match address outside_1_cryptomapWARNING: The crypto map entry is ...

Guys,Do you have any experience with "NAT outside interface" in Cisco ASA 8.3 above ?I have a problemI want to do NAt-ing like this :InsideY.Y.2.14X.X.2.66 DMZ-10X.X.2.11X.X.2.66I have interface outside with ip address X.X.2.66, i want to do NAT in t...

                   HI,I have configured a policy to allow a traffic and logging is enabled but when i see on real time monitering on ASA i can only see deny traffic not the traffic which is allowed by that permit policy.Any body can advice on thisSys...