Network Security

Hey Gents/ladiesWe have a ASA 5505 and a 5510, that we are using site to site..I need to traceroute from the 5505-5510.. From the outside interfaces.. Don't want to do this through the site-to-site.If you know what i mean..I have temporarily added a ...

Greetings,I will be configuring port forwarding to a phone system on the network for remote management. I would like to have the ASA send an email alert when a connection has been made to the open port. Is this possible to do and if so how to configu...

Hi All,I am looking to configure HA on Firewall with 2 ISP's terminated on multiple router.please help on the same.

                   Hi,I am getting following maessage on my ASA %ASA-1-106021: Deny UDP reverse path check from 192.168.1.220 to 10.192.0.249 on interface inside.192.168.1.220 is not there in my network and I have enabled the RPF on ASA so it is obio...

Hi Experts,Please find the Network digram below. i want to deny internet access for some host in my network & other host should be access email ony what acces rule should be apply in ASA 5510.

Dear All,Can you confirm whether ASA 5512 can work as proxy server??RegardsBR                  

I have been trying to implement NAT on a Cisco 6500 today. It seems the issue I'm having is DNS related, as I can access wesites via IP address.  From inside the local network I can ping my DNS servers (66.28.0.45, 66.28.0.61) but web browsers timeou...

Hi My ASA5505 is not boot up. I did upload ios from rommon mode with tftp and tftpdnld.It is uploaded successfully after reboot it stopped at cisco logo sing. Use, duplication, or disclosure by the Government issubject to restrictions as set forth in...

Hi All, During the configuration of site to site tunnel, we have the below configs done;iam not sure  but there is a discrepancy in it for the crypto map identifier that is 5 from site a to site BDue to this there is intermittent connectivity loss fr...

Hello everybody,is there any clue to NAT PORTS when no nat-control is active "Enable traffic through the firewall without address translation"?thx in advanced alexxSorry I forgott, I uses a FWSM with 4.1(7). thx alexx

Does anybody know how to make the ASA report this VRRP traffic and an error?It's just a regular swicth (Juniper EX3300) sending VRRP traffic on the same VLAN and the ASA5510 inside port...And if md5 authentication is enabled on the VRRP switch then m...

Hi,We do have many default inspections in ASA firewall but wondering what all those mean? what each can do if configured & what can miss if not.can someone please help to understand the same  & guide if document of url details about samepolicy-map ty...

Friends                   In packet tracer fail, the traffic can get through, the unicast rpf is not dropping it.In packet tracer fail, looks like the return packet is DROPed because of uRPF.ASA1# show ip verify statistics interface OCODC: 0 unicast ...

Hi to everybody, I would like to know something with more accuration about idle timeout configuration.In particular why is impossible to set "half-closed connections"  to a value lower than 5 minutes neither through a policy-map? In my  particular sc...