Network Security

Please excuse my lack on knowledge on this topic.  I am trying to get up to speed on this topic as quickly as possible.  I searched through the other disucussions and located some that sounded very similar but not quite the same, so please excuse the...

Hi,I want to create Site to Site VPN on my asa device.One end is already created but my side need to configure.the parameter is given below.Phase 2 parameter is esp-3des esp-sha-hmac.SIM IP subnet is 10.85.170.0/23 and VPN gateway is 41.220.75.1.IKE ...

Hi,Please find my current interface IP.I want to add one more public IP on it.interface Ethernet0/0 description ASA Outside segment speed 100 duplex full nameif OUTSIDE security-level 0 ip address 62.173.33.76 255.255.255.240!interface Ethernet0/1 de...

Hi, how can I configure netflow parameters on ASA platforms with CSM ?From CSM documetats it seems that CSM can manage netflow only for ASA 5580 and if i try to configure netflow in platform/logging I cannot deploy on ASA 5510.May I use flexConfigs f...

Hi everybody.I have a problem with the failover FWSM. I have a structure with two switches 6500 and each having a FWSM. I updated the FWSM to 4.1 (6) in the both, but when I try to enable failover got the following error:First FWSM:Mate's license (Fa...

  i have a customer having 2 FWSM installed in VSS 6509he  was not able to access them , on same time communication between clients and Database behind firewall was disconnected.he Reload both FWSM module in sequence resolve the problem.i need to inv...

                   Hi,We run some Cisco ACS applicances at the moment and our remote agent is installed on our domain controller / active directory server which are soon to be moved from windows 2003 server to a VMWare windows 2008 R2 64bit platform....

Hi all,how can I setup that the backup connection will start but after 30s of icmp timeout the default gateway (tracket object - 192.168.1.1)My configuration:sla monitor 123 type echo protocol ipIcmpEcho 192.168.1.1 interface outside num-packets 3 fr...

Hello there,I am configuring remote host blocking on SSM-10 within ASA to make shun on certain signatures. SSM-10 resides on the same ASA on which it should perform shun action. But unfortunately it doesn't work. ASA version ins 8.4(3) and IPS versio...

We are replacing our EOL Watchguard X1000 Firewall(s) with Cisco ASA 5510 unit - ASA Version 8.4(3).  Following is the static NAT I have build and the corresponding access list.nat (FW2Inside,FW2Outside) source static BW_XSP1_Private BW_XSP1_Public d...

Hello,Let me start by saying that I'm just starting to study for CCNA, so the ASA seems to be a bit above me yet.  The ASA's we are using is for VPN to our corporate office and only allowing access to our Citrix environment, so no direct internet all...