Network Security

Is there a way to match tcp flags in an access-list on an ASA, e.g.:  match-any +syn +fin +rstor   match byte[13] eq 2   match byte[13] eq 17   match byte[13] eq 4?

                   I need to configure nat from inside to dmz, i have already configured one network object and now need to apply static nat from inside tor dmz It seems that you have to apply when the network object is being created but I am confuse...

7.1(6)E4 Service Pack ReleaseThe 7.1(6)E4 service pack reverses the SMB protocol related inspection enhancements delivered as part of 7.1(5)E4 release and also addresses a Signature downgrade issue with SSM platforms.Additionally, as part of this rel...

I've got an ASA 5550 running Software Version: 8.2(2); I replaced two static NAT commands below with new commands to change the connection limits: no static (inside,outside) ggg.ggg.ggg.118 ppp.ppp.ppp.118 netmask 255.255.255.255 tcp 500 1000 static ...

HelloI am using ASDM 6.4 to configure my ASA5505. I have two expernal IP:s, lets say 1.1.1.1 and 1.1.1.2, and with netmask 255.255.255.128.On the inside I have a SBS 2011 server with Remote Web Access (port 443). I have succesfully created a network ...

Im upgrading a asa 5510 from 8.3 to 8.4.I know from 8.2 to 8.3 was not a mirror update because of nat and access-list but is from 8.3 to 8.4 a mirror update or is there anything which I should be aware of?Any help would be highly appercaited.

I am trying to configure a site to site ipsec vpn with 2 cisco 5505 ASA's. Unfortunately when i open up the ASDM there is no vpn wizard to start the configuration.The version of ASDM i am using from flash is 645-206.bin and the firmware on the ASA's ...

Hello,I add the below configuration in our ASA config so I can use the ISP2 to browse the internet using port 80 & 443 only.route ISP1 0 0 1.1.1.2 // Default route pointing to ISP1route ISP2 0 0 2.2.2.2 2  // Default route with Metric 2 via ISP2stati...

I have an ASA 5505 that is currently running 8.0(4)43 and we have a requirement to upgrade to 8.4(4)1.  My only questions is that it currently only has 256 mb RAM.  According to the Compatibility guide it states that 512 mb RAM is recommended with th...

Hi, All!We have Cisco ASA 5520 with csc ssm 10 (product ver. Trend Micro InterScan for Cisco CSC SSM 6.6.1125.0)in Web>Global settings> URL filtering > Rules > Communications and Search> Social Networking category is set to block during work time and...

I have a cisco asa 5520. i need to forward telnet to a router on the inside interface. Here is what i have done so far but it doesnt seem to be working.I have created an access-list that looks like this:access-list 102 extended permit tcp any host 10...

i am currently looking at the suitability of replacing an 'airbreak' firewall with 2 new ASA 5505'S.One stipulation i have is that i require to connect the third party that is currently using the 'airbreak' solution using a secure iPsec VPN.I have bo...