Network Security

It seems to me, after a lot of testing, that regardless of ACLs and ICMP settings, you cannot ping a firewalled vlan interface on a FWSM through another interface.In other words, let's say I have a layer 3 switch connected via a trunk to the switch w...

Hi, I'm running ASA version 8.4(4)1 and have configured internet failover through the use of weighted default routes and tracking. This part works fine, but when I failover to ISP2 I can't connect out. The problem seems to be NAT, because when I fail...

Hello Support,I would first like to thank all of you, as you always assist when I have any questions. All your help in the past has been much appreciated!The quesiton I have is currently we are running on one FWSM, that is having certain routing issu...

Hi  ,i have  purchased a new  firewall  and  ask the vendor  the part no---ASA5510-SEC-BUN-K9 .Which  has  3 fast ethernet and  2gig  ports   . How  to  identify  thoses ports  . Does  they  come  with  ethernet 0,1,2,3,4  or   Gig 0 and gig 1 then f...

Hi, we have a local Netflow collector working fine. We also have a centralised collector that we’d like to use to send the same Netflow data, but it is not being received. We need to send the data via an IPSEC VPN.When I do a 'show flow-export counte...

i configured on my asa 5510 dmz zone and put my mail server in this zone. i configured nat rule with public address which i received from my ISP and i configured ACL rule. my configuration of asa 5510 is:[quote]Result of the command: "show runn": Sav...

I have a an ASA 5510, version 8.2(1) and I'm trying to get NTP from our Core Nexus 7K Switch through this to a Time Server on the Internet. This fails.The ASA has three interfaces; Inside, Outside and Management. The 7K is behind the Management inter...

I have a 3700 series router and a PIX 525 with unlimited licensing.PIX:int e0 DHCP to WAN, that works fineint e1 (admin shutdown for testing)int e2 up/up, 192.168.100.1/24, speed 100, duplex full, sec-level 100, nameif=INSIDE23745:int fa1/0, up/up, 1...

I have an ASA5510 with 8.3 and a Cisco PIX525 (retiring). The ASA was for VPN traffic only while the PIX was for all other Internet traffic. I'm trying to move all the traffic to the ASA5510 so I used the PIX to ASA migration tool. I migrated the PIX...

Hello,My customer has a rather complex configuration on an ASA 5510 running version 8.2They are migrating to new ASA 5515X models which of course only version support 8.6How can i convert the configuration from 8.2 to 8.6 since the new ASA's do not s...

Hello,I have several working VPNs between ASAs 8.4 and 8.3The way this was set up is with cryptomaps that match whole subnets and ACL on the outside interface to permit from/to the RFC 1918 addresses.I notice that the hit count is zero on these rules...

I had a previous issue in which I couldnt make a connection to an ASA 5505 behind an edge firewall found here: https://supportforums.cisco.com/message/3774363My continuing issue is that I can indeed conenct to the ASA 5505 remotely but I cannot acces...