Network Security

Hi All, During the configuration of site to site tunnel, we have the below configs done;iam not sure  but there is a discrepancy in it for the crypto map identifier that is 5 from site a to site BDue to this there is intermittent connectivity loss fr...

Hello everybody,is there any clue to NAT PORTS when no nat-control is active "Enable traffic through the firewall without address translation"?thx in advanced alexxSorry I forgott, I uses a FWSM with 4.1(7). thx alexx

Does anybody know how to make the ASA report this VRRP traffic and an error?It's just a regular swicth (Juniper EX3300) sending VRRP traffic on the same VLAN and the ASA5510 inside port...And if md5 authentication is enabled on the VRRP switch then m...

Hi,We do have many default inspections in ASA firewall but wondering what all those mean? what each can do if configured & what can miss if not.can someone please help to understand the same  & guide if document of url details about samepolicy-map ty...

Friends                   In packet tracer fail, the traffic can get through, the unicast rpf is not dropping it.In packet tracer fail, looks like the return packet is DROPed because of uRPF.ASA1# show ip verify statistics interface OCODC: 0 unicast ...

Hi to everybody, I would like to know something with more accuration about idle timeout configuration.In particular why is impossible to set "half-closed connections"  to a value lower than 5 minutes neither through a policy-map? In my  particular sc...

I recently setup our Cisco 890 in zone firewall mode, rathern than the ACL method.I feel like I have most of this under control, however one specific area. I am trying to block some of our QA resources from ever reaching production, you know the deve...

Hi! The users have access to some servers through cisco vpn client. In ACL Manager I created the nesessary ACL and ACE and then I applied the ACL to the Group Policy for the users. The users now have access to some servers through cisco vpn client an...

Hi am trying the below configuration found on the internet  to stop teamviewer on cisco asa , but its not working , pls adjust the config to make a switable for workregex TV-RGX “\.teamviewer\.com”regex DG-RGX “\.dyngate\.com”class-map inspection_def...

Hi all,I have a problem with an ASA5510 (8.0.4) firewall in South Africa (I'm in the UK).It's a replacement firewall that I am trying to configure remotely through a serial device with an internet facing connection, but the enable password is not wor...

HI All,i need to upgrade ASA 5540 from 7.1 to 8.4 for secure connect feature of Cisco Jabber Configuration. Support forum guides that, i need to follow upgrade path from 7.1 --> 7.2  --> 8.0 --> 8.2 -->8.4 and also do a memory upgrade from 1GB to 2GB...