Could some security expert please help me understand icmp behavior for an ASA running 8.0 or 8.2? My inside hosts (sitting behind the inside interface of ASA) can ping an external IP (on internet) . But when I ping that same external IP from the fire...
I had an interesting question posed to me today about how to limit bandwidth usage on the outside interface of an ASA deviceI did some research, and this is what I came up with. Limiting traffic to 2.5 Meg a secondclass-map CM_BW_Throttlematch anyp...
Hi guys:I'm about to made an upgrade on a sensor but when I try to do it i got an error message like this"cannot upgrade software on sensor, errTransport-Application processing the request respondend unexpectedly"Is it something about a connection pr...
We have an ASA 5520 that uses LDAP to authenticate VPN users with our Server 2008 R2 SP1 domain. We would like to convert to Secure LDAP so that the passwords are encrypted when they are checked against AD by the ASA. Our CA issues Suite B certificat...
I had the ip address conflict problem on the dmz network, i removed proxyarp on the dmz interface on the firewall it sorted it. Another issue i am experiencing right now is that my natted DMZ servers are unable to reach the internet. what could be re...
Hello, I'm hoping that someone can straighten me out. I don't have a ton of experience with ASA's and I've inherited one that I need to support. Currently it has several IPSec tunnels terminating on it. There is one tunnel that connects to an offi...
HiI've got a ASA5505(ASA5505-BUN-K9), and i'm hitting the user limit, more and more offen. So i'm looking in to upgrading the licene to unlimited and at the same time i'm looking at the security plus bundle...So i'm a bit in doubt, if i can just buy ...
Will the latest version of CSM (4.2 sp2) manage the new ASA 5500-X series and their IPS's? The client I am at has version 4.1, but I don't want to upgrade them to 4.2 if it's not going to gain them anything.I checked around the 4.2 documentation and...
Hello there,Anyone experience this? I've never seen this before ...A host in DMZ segment is getting an IP conflict with the ASA DMZ interface itself. Any address assign to the host, always says IP Conflict.
I have one machine with SBS2011 installed which has 2 nework cables connected to a CISCO asa 5505. One cable is connected for DMZ to the EDGE (which is not configured yet).On the SBS2011 I have 2 virtual machines running (HyperV) , one for Lync FE (M...
Hi,I am trying to understand how ACLs and security-levels work together on ASA. Here are my Qs:If no ACL is applied, then by default, traffic from higher security level is allowed to go to lower security level. Then based on the stateful inspection c...
