Network Security

So I have, what I think is an easy question, but I think I'm overthinking it. See, too many thinks..I have a circuit that will be delivered to a client next week and we are installing an ASA 5585x for them. They will have a circuit coming in with a f...

So I loaded the shiny new ASA 9.0(1) on a test/dev cluster of 5510's with the SecPlus license.Two things.1.  In 8.4.4 (or maybe 8.4.3?) new password-policy commands were introduced, which allowed for very granular password policies for local users.  ...

I need to create a DMZ Vlan.  Core switch is a 6509.  FW is an ASA5520.  Need to create a VLAN for DMZ purposes for outside facing servers.  NAT is used on ASA.  All help is appreciated.                

We have a customer who has 4 x 'WS-SVC-FWM-1' modules installed within 2 x 6513 chassis. The FWSMs are all running version 3.1(16) with failover group 1 and 2 enabled.After a few recent planned and un-planned power outages the FWSMs have come up with...

My web server is out of public IPs.  I requested more from my ISP and I got a different range with a different gateway.  How do I handle the configuration on my Cisco ASA?Without any configuration changes to the firewall I saw the traffic hitting it ...

I had an experience this week of installing a 5510 ASA with 8.4.3, also tried 8.4.4(1) with the strange effect that I randomly was losing contact with the internet.The interface stayed up/up. no errors or what so ever on the interface. Reseat of the ...

Employee has a laptop and connects to our secure wi-fi then rdp to his desktop PC with no issue.Same employee takes same laptop home, pulls IP from home internet, launches Cisco VPN client, connects just fine.  He has a RDP shortcut to work desktop o...

I am currently trying to enable WCCP between a Cisco ASA 5512 firewall and Barraccuda Webfilter 410 Vx applicance. The ASA firewall is running IOS version 8.6(1)2 and the Barracuda is funning firemware 6.0.0.013. Both the ASA and Barracuda are in the...

I am seeing requests for DNS updates being denied on my DNS servers. Can I block the requests at the ASA without interfering with legitimate traffic? I am thinking yes by allowing my ISP DNS servers then blocking all other traffic on port 53 but woul...

I have an unusual problem. I've been attempting to fix this issue or confirm the issue is not with the firewall and I have kind of run into a road block. This is my problem as I understand it. A client of mine has a VPN tunnel built over a point to p...

I will delete all unused networks/hosts objects in Cisco CSM 4.2 befor I compare the objects with the entries in our IPAM. Does somebody know how this is possible?Many thanks for your support.

Hi,Time for me to ask a question.The ASA in question has a pretty simple NAT configuration. The most critical interface regarding the customers connections uses a NAT Pool and also PAT translation. The configuration is the following (Only changed int...