Network Security

I have a cisco ASA configured for AnyConnect clients.  I also want to pass 443 traffic back to an internal web server, but not sure if I can do this since the AnyConnect clients are already connecting over 443 to the ASA, right?

I am a little uncertain if I am required to do anything else.  Or perhaps I am misunderstanding and the Identity cert doesn't need the same trustpoint as the CA cert?I get a FAIL message when I run the crypto ca authenticate command for my certificat...

Hi ,I have ASA5585 in routed mode (Check the attached diagram) , and my DHCP client on the inside , while the DHCP server is on the outside.I know that ASA can be configured as a DHCP relay , but there is a condition “DHCP clients must be directly co...

i has ASA 5520 that has no any OS images in it's flash disks, and i want to boot it first from the tftp then copy this image to flash disks ( if the tftp boot suc ) and i did the below config :---------------------------------------------------------...

Dear all,we have cisco ips Version 7.0(2)E4 recently its analysis engine stopped working , folowwing is the logs for the IPS devices and also please check the attached screen shot for detail.# show healthOverall Health Status                         ...

Hola a toda la comunidad.Quisiera consultarles algo, he adquirido un Cisco ASA 5505, deseo configurarle Inside, Outside y Dmz, así esta mi escenario:Internet----ISP--outside-(1.1.1.1 En realidad es mi ip publica)--CiscoASA5505--inside-(192.168.5.1)--...

Hi All,I have my AIP-SSM set up working with my 5520 ASA, and the device is passing packets, but how do I actually confirm it is doing what it is supposed to? I can see that it is processing packets, but I can see no way of verifying what it is doing...

I'm not clear about the capabilities of the ASA 5510 GigE interfaces (eth0/0 and eth0/1) with an without IPSEC tunnels enabled.This page http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html shows a figure of 170Mbps 'Maximum 3DES/AE...

Does the BVI have to be on the same subnet as the nodes on the Inside interface?We'd like to place the ASA between two routers with a /29 in between them and put the BVI on the same subnet.The servers would be behind one of the routers (L3 switch) on...

Dear All,We had one strange issue which was resolved by configuring  "no threat-detection statistics tcp-intercept" from threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200.Issue===We were not able to access our...

HelloWe are planning to upgrade the ASA license in an A/S pair by adding the ASA5500-SC-20= license.The ASA is 5545 and runs 8.6. According to documentation, after 8.3 version, the ASAs can share a license features and do not require the same license...