Network Security

ASA is 5540 w/8.3. I have a large inside block of inside address I want to NAT or PATto outside addresses.  Is it possible to use a block of outside addresses with NAT withrollover PAT to the whole range, or is it restricted to roll over to only a si...

Is it possible to make Ironport S370 as the URL filtering server of ASA. I currently see only Websense and SmartFilter as the default option. Is this possible with just these two devices ( without using a third server for WCCP) ?Currently intranet us...

hi ,yesterday I installed  a ISE in VM server with ESX4.1,I can login the ise with the user I build it in CLI ,but I can't login it with IEor FIREFOX user the same user,why?

This is with a ASA5020 (8.1(5)) This is the nat I have today:global (outside) 1 66.xx.xx.135 netmask 255.255.255.192static (inside,outside) 66.xx.xx.153 10.21.31.67 netmask 255.255.255.255This works great .67 is a smtp server that only SENDS email ou...

Hi,I have configured the two FW for HA mode, and I am checking " sh Failover " I am unable to understand why it’s showing only two interface in monitoring.  It should show all 4 interface in monitoring. I have highlighted in below configuration. I am...

Is port www the same as http?  Do I need to open port www for OWA?

I had an interesting question posed to me today about how to limit bandwidth usage on the outside interface of an ASA deviceI did some research, and this is what I came up with.   Limiting traffic to 2.5 Meg a secondclass-map CM_BW_Throttlematch anyp...

We have an ASA 5520 that uses LDAP to authenticate VPN users with our Server 2008 R2 SP1 domain. We would like to convert to Secure LDAP so that the passwords are encrypted when they are checked against AD by the ASA. Our CA issues Suite B certificat...

I had the ip address conflict problem on the dmz network, i removed proxyarp on the dmz interface on the firewall it sorted it. Another issue i am experiencing right now is that my natted DMZ servers are unable to reach the internet. what could be re...

Hello, I'm hoping that someone can straighten me out.  I don't have a ton of experience with ASA's and I've inherited one that I need to support.  Currently it has several IPSec tunnels terminating on it.  There is one tunnel that connects to an offi...