Hi Guyzz, I am configuring ASA 5505 i have configured 4 ports ,3 INTERNAL PORTS and 1 OUTSIDE PORTINTERNAL1)192.168.17.X2)193.168.17.X3)192.168.10.XOUTSIDE1)10.112.15.XTHE INTERNAL INTERFACES ARE ALL WITH SECURITY LEVEL 100 AND OUTSIDE 0,...
Hi All,We have a request from a customer who wants us to either turn off SQLnet inspection or increase the reassembly buffer size of 8K as per below. They have a Oracle database behind the firewall and are seeing connection drops."As per my understan...
Dear all,i have a problemall my user vlans are on the core it self , but the servers vlans are on the fwsm, when 2 servers are in the same vlan they can work perfectly , but there is a delay and sometimes packet drops when a server on vlan try to com...
HiI have ASA-SM failover pair in two Catalyst 6500 switches.I send from switch to ASA-SM management VLAN 1234 to admin context for management purposes. I have another 3 contexts on ASA-SM.Can I have same managemenet VLAN1234 on eac...
Dear Friends,i have been facing strange issue on FWSM (6509 switch). we have created a vlan inteface for server farm on fwsm and its stop responding automatically and we need to give shut/ no shut command under that interface to back into normal...
Hi Security Experts,I am facing a weird problem.Firewall is learning route on outside interface, but packet tracer shows that a packet destined to that IP is being sent out on inside interface. The packet should come on remote1 interface and should g...
Hi Security Experts,In a very weird behavior, I see that ASA running 8.4(4)1 is not doing route-lookup and taking routing decisions just based on nat statements. I have a firewall running older 8.2(2)16 code as well and it does route-lookup before fo...
Hello, I have a question regarding policy static nat,lets suppose I have source 10.1.1.1/32 natted 20.1.1.1/32 with destination 30.0.0.0/8it means that 10.1.1.1 going to 30.0.0.0/8 will be natted 20.1.1.1 and 30.0.0.0/8 can reach 10.1.1.1/32 through ...
Hi Guys one of my customers asked the following about a limitation on the ASA5505I have a client that has a number of branch offices on a Gen-I OneOffice network. For complex and political reasons, we can’t trust all nodes on that OneOffice network. ...
Hi I have two control point, two firewallthe second one is linked inside one DMZ from the first firewallroute is good and inside the DMZ from first firewall I have servers tooso to be more clear we could call as IP for the DMZ from first firewall, In...
Hi ThereI have a doubt and hopefully someone can assist me on this. My client would like to deploy Web Cache WCCP solution. The Web Cache server is situated on a different interface of a Cisco ASA FW (nameif dmz2) , and the LAN users are situated on ...
I am new for configuring asa I want that my inside user only do browsing on internet and stop downloading any thingpls give me step by step configuration for this task I am using asa 5505 and a 1800 series router for internet connectivity and 2960 sw...
Hi there. I one question to all cisco IDS/IPS professionals. If the management port only accept inbound traffic how can I then activate my Cisco 4510 IPS appliance to get automatically signature updates from cisco.com ? That one requires outbound tra...
