Network Security

We recently upgraded from 8.2 to 8.4 on our ASAs, and I'm still trying to get used to the new NAT configuration.I'm trying to add a new PAT statement, that previously used an access-list.How would I enter this on 8.4?access-list guest-nat extended pe...

                   Hello everyone,    Here is my situation, we have a Cisco 2901 as a router on a stick for several vlans. Everything on the segment routes fine and accesses the internet just as they should. The 2901 connects to an ASA5505 on port 0/...

Hi,How to schedule automatic Xlate sessions cleaning in ASA5550.  I want to clear few global nat sessions manually every week.  Is there any way to automate that?  Please helpThanks

Hi,Im trying to do a normal port forward on a ASA 5505 with 9.1(1) and it is not working as it should.There are two ports that I want to forward, TCP 32000 and TCP 32001, from the outside interface.First I tried a Auto NAT that gave rpf-check drop.ob...

Hi, I like to know with cascading in the ASA about contexts.I have two contexts, one contextA e one contextB, i'm using a front wit other. ContextA have two interfaces logic, one inside and onde cascading. Context B have two interfaces logic, one ins...

Hello,Is there any signature to detect skipfish kind of application with Cisco IPS, when web server is running https ?Or is it possible to write own custom signatures and with engine will do that ?

Dear All,I have Cisco ASA 5512-x and have 3 ISP. i don't know how to confiure on ASA 5512-x with muliple ISP. all 3 ISP i would like to active the same time.Could you advice or have some idea?Please help!!!Best Regards,Rechard

Cannot telnet to port 25 to test for SMTP traffic.  Packet trace indicates that the packet is dropped by the implicit rule, but I have tried an access rule specifically for SMTP, and the trace appears to skip the rule and drop the packet when it hits...

I have installed a new ASA5510 with CSC, and everything is working properly except the access to websites using https. All sites/access to them seem to be blocked by the ASA. I have read that this access is by default enabled and I have tried to add ...

What is the correct way to remove an IP address from one of the interfaces bound to a FWSM? I seem to recall reading a warning that executing the no ip address command would remove ALL IP addresses configured on the FWSM, however, I have not been abl...

I'm getting "SYN Timeout " message in my syslog when a user is trying to ssh to a server behind a firewall and getting denied. The hit count for the access-list is increasing every time he tries. The route and the translation are both configured. How...

Hi GuysIs it possible and if so, can you tell me how to log command entered by a user to go to a syslog server. Similarily to the archive command on ISO.Thanks in advanceNoel