Network Security

Hi , Any help would be appreciated. I am unable to ping external address, which are directly nating through to internal hosts (Internal hosts are pingable)I have ICMP FIXUP enabled. See running config below.        ASA Version 8.2(5)26 <context>!host...

I have a very basic ASA that is using the default VLAN1 for internal private subnet and VLAN2 for public subnet.  I want to add a third subnet VLAN3 that will be private, security level 100 and NATed out the ASA.  I also want to be able to communicat...

EDIT: If I'm missing something that's required or you just have some questions, just let me know and I'll add the necessary information.I am trying to set up an ASA5550 so that I can access the servers behind it. Simple. As of now, I am unable to eve...

Hello all.  Over the weekend this router was put into production.  SSHv2 is configfured and was working fine.  Due to some circumstances, we had to avoid configuring any zone-pairs that included the self zone.  This of course left the router open som...

We have some Cisco 2911's that we are configuring 2 VPN's ( second is for redundancy) We are pretty confident on the failover VPN setup using SLA monitoring. One thing we are stuck on is the redundant VPN will be setup over a 3G connection provided b...

I have a Production Router that is hosting 30+ IPSec Tunnels.  I have an ACL on the inside Interface of the Router to stop unwanted traffic from entering our LAN via the Tunnels.  The current ACL looks like this: access-list 145 deny   tcp 192.168.30...

Hi,I have a cluster with cisco 5550 asa's.I need to have mulpti new DMZ zones on our firewall, and since we already have 8 interfaces in use, I need to swap one interface from one DMZ to multiple DMZ's using subinterfaces...My question is now, what w...

I have enabled 100 of vlan interfaces in cisco. i assigned it under one phyiscal interface .What i require is all vlan should have internet connectivity , but no vlans should not have routing between each other, what s the best way to accomplish this...

Hi,yesterday i have upgraded my live asa to new version asa845-k8.bini read that a lot of bugs were fixed and some improvements with per user acls (need this feature).After upgrade (zero downtime - i have A/S environment) my CPU and Memory were down:...

We've been having a few problems over the past week or so which Objects and Object groups.What we have is an object group called HTTP out which contains around 120 objects and 10 object groups, this object group is part of a rule any source to HTTP o...