Hi,We have an ASA 5520 which is in multiple context mode. We are trying to pass traffic from the outside interface to the dmz interface.I may be fundamentally wrong in the way i'm configuring this, but this is one ting im hoping someone may be able t...
im a newbie so be easy on me....i connected to a asa 5510 at worki checked the GUI of creating access rulesi see that by default all rules are created as incoming and only by choosing "more options" a outgoing rule can be set.is there any reason for ...
Hi Team,Is there any option available in any of the Cisco ASA55xx series model to install both csc-ssm and aip-ssm ips modules ? If, so is it advisable to install both ?Is the throughput of ips module has any dependency with the asa chassis throughpu...
Hello all,is it possible to policy NAT for AH/ESP and tcp on the same single IP address (two different protocol types)?Objective = pass an IPSEC VPN through (not terminate) an ASA 5500 and share that public with another circuit.i.e.static (inside,out...
Hi All ,Is there any document or a tool to know the vulnerabilities in thea specific asa version with a specific release?or any site can help to search on it with a specific version.my version is 8.2(2)17
We got the below alert when we ran the PCI scan on our VPN firewall (use it for remote access VPN), did anyone come across this?OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Ciphersuite Disabled Cipher Issue Solution-Upgrade to OpenSSL 0.9.8j or la...
Up until recently one of my sites was able to get to a postini subnet. Then we started recieving "host unreachable" e-mails. Postini told us SMTP traffic was not getting let in. I've compared the current config to a config that was saved before the i...
Hi guys,What is the best practices when deploying the IOS Firewall feature on routers, especially on the 800 series routers?I know that a router will never be a true firewall but those features are there to make them simulate...Usually what I do is t...
I want to allow ICMP traffic on ASA 5510 from LAN interface to DMZ. I've permit any traffic and added ICMP to the inspestion list also but still there is problem. Belos is the configuration. The image is asa822-k8.bin:ASA Version 8.2(2)!hostname fw-0...
I have setup a DHCP relay on my asa, I can see the request being forwarded to the backend server however I keep getting log entries stating:"UDP request discareded from x.x.x.x/137 to inside:y.y.y.y/137"Are there any options that I need to define in ...
In the configuration tool (CCO) I have seen that pix 3DES option now is no charge (0 cost).At this time in an existing installation with DES is possible upgrade to 3DESwithout charge?Thanks and regards
Hello everybodyI have a problem where I have a network that passes fwsm to connect to another network where this other network has a route back to the same input interface.Look the attached imageServer NY needs to connect in Server MD, I did the conf...
A client has two ISPs and two ASA's. They want to use FAST ISP most of the time and NOTSOFAST ISPis FAST ISP fails for some reason. I found a great configuiration doument using the IP SLA which I haveused in the past in IOS. I have setup ASA activ...
Hello,Our organization uses a Cisco cloud based firewall/ScanSafe for internet access/content filter.We moved away from the previous method of an ISA Firewall using pac files.In the old system we had AD security groups to grant access to the ISA. Wi...
