Network Security

Resolved! IPS Module - ASA 5585x

DearsI have configured the IPS module with Setup command and have initialized it , but when i tried to access the IPS via ASA ASDM and saving any change it keeps telling me that i do not have sufficient rights ??Please check the attached and advise w...

I cannot ping two ASA firewalls connected on the same swicth

Any help please?I have two ASA firewalls connected to same layer 2 Switch and with different subnet on Inside interface . ASA-1 ================>[ layer 2 Switch]<====================ASA-2 ...

Restore to new 5505 does not work correctly (fixed it)

Hi,we are currently down, so help is much appriciated.A few days ago our old 5505 (ASDM v 6.2.5) started to fail. managed to get it up and running after serval power off/on. Took a backup using the ASDM Tools -> Backup configuration that generates a ...

pvlans and virtual servers

folksnot sure if this is the correct place to post but i'm hopeful someone here will have used this scenarioi have a existing and working pvlan with the usual community and isolated ports but i need to add a new setup to iti have a requirement to add...

Mail server NAT translation with smtp redirect

HI,We are setting up a GWAVA smtp filter (IP address: 10.10.10.1) appliance that needs incoming smtp traffic redirected to it. I still need the mail server (IP address 10.10.10.2) to have a 1 to 1 nat translation to an outside IP address (IP add...

Best Practices for configuring ICMP from the outside

Question, Are there any best practices or best recommendations on how ICMP should be configured from the outside? I have been cleaning up the rules on our ASA as a lot were simply ported over years ago when we retired our PIX. I noticed that there is...

What is the cost of ASDM software???

Plz any one tell me the cost of ASDM software ,I need to install in ASA 5510 software

Cisco ASA bootproblem

Whenever my ASA boots, it needs more then one attempt to load the IOS. It starts doing it over and over again (mostly 4 or 5 times) At the end, it succeeds and I have a prompt. Doing some research, this does not look oke is it?ciscoasa# sh bootBOOT v...

Resolved! Output modifiers on FWSM logs

I am trying to search through some extensive FWSM logs from a SSH session for a specific IP addressWhat kind of output modifiers can I use to include or exclude IP addresses when viewing the log?I am trying show logg I i 172.20.1.5but it won't take i...

IDSM with shun on FWSM

Hi, we have IDSM configured to block (shun) for some signatures with FWSM.when sig 3002 is fired , the attacker is shun by FWSM but the issue is sig 3001 is fired and shun the victim which is internal normal user.any suggestions,

ASA5505 DMZ and Internet access

Hi all,I need help on ASA 5505 with Base License that uses 3 VLAN's.My VLAN 1 is for used for my home network.VLAN 2 is connected to the public Internet and my IP gets assigned by ISP dynamically.VLAN 3 is DMZ where I will have few VM's that would ne...

Resolved! Allow DMZ server to contact the internet (http only).

Hello,I've set up my server in the DMZ. I was able to make some rules to allow the dmz host to access for example, my SQL server on the inside. It was just an ALLOW rule I had to make.I would need this DMZ host (only this host, not the other DMZ me...

Cisco ASA 5585X Ether chanel with Nexus 7000

I want to configure 5585x Active/Standby with 2 nexus switches utilizing VPC technology. Is this possible? New ASA 8.4 supports etherchannel so I want to plugin 2 cables from ASA1 to sw1 and sw2 and 2 cables from ASA2 to sw1 and sw2? Is this a vali...

Redundant VPN with only gateway

I have three sites and the first and second site have redundant link but the third site only has a link.The third site has two VPNs site-to-site one for the first site and one for the second site.How do the traffic that leaves of third site with dest...