Network Security

I'm not clear about the capabilities of the ASA 5510 GigE interfaces (eth0/0 and eth0/1) with an without IPSEC tunnels enabled.This page http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html shows a figure of 170Mbps 'Maximum 3DES/AE...

Does the BVI have to be on the same subnet as the nodes on the Inside interface?We'd like to place the ASA between two routers with a /29 in between them and put the BVI on the same subnet.The servers would be behind one of the routers (L3 switch) on...

Dear All,We had one strange issue which was resolved by configuring  "no threat-detection statistics tcp-intercept" from threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200.Issue===We were not able to access our...

HelloWe are planning to upgrade the ASA license in an A/S pair by adding the ASA5500-SC-20= license.The ASA is 5545 and runs 8.6. According to documentation, after 8.3 version, the ASAs can share a license features and do not require the same license...

Hello All,Im having an issue setting up Access through our firewall for external usage. Im not sure if its even possible.So....We have 1 external IP, say 80.80.80.80.We have 3 internal Servers (10.0.0.1, 10.0.0.2, 10.0.0.3), 2 running web apps on por...

Hi, I am new to ASA and I am trying to downloand a file from tftp server to ASA. I can ping my tftp server but I am unable to download it. This is a lab/test environment. Please see the configs/logs attached. Any help will be appreciated.Cheers, Aun=...

Hello,I have an ASA with version 8.4.4.1 connected via a switch to two routers and I have two default routes on the ASA pointing to the two routers.The question is : Does the ASA load balance the traffic onto the two routers per-destination or per-pa...

hi How to configure ASA 5520 to resolve names in ASA's. We are currently using ASDM to configure network objects with the hostnames in the internet and then specifying the IP address . But this is done manually. Is there a different way of setting it...

                   Hi..Can anyone please share 8.4 version config of below 8.2.access-list www_http extended permit tcp host 192.168.183.202 any eq wwwaccess-list www_http extended permit tcp host 192.168.183.202 any eq httpsaccess-list www_http exte...

Hi,We have a problem of setting up an ASA for our network's edge:We have IP address XX.150.85.91/255.255.255.0 setup for our ASA's outside interface. We have another IP-address in same block XX.150.85.85 setup for static nat for one of our internal s...

Is it really the case that the ASA will not generate ICMP Host Unreachable messages for subnets connected to any of its interfaces (in breach of RFC1812) as claimed here: https://supportforums.cisco.com/thread/2093028 ?I'm investigating a situation w...

I am having some issues with my ASA 5510 (running ASA 8.2) dropping ICMP unreachable-fragmentation-required-but-df-bit-set type messages coming in on the outside interface. I have the following entry in the ACL for the outside interface:access-list o...