Network Security

Just started working with the post 8.3 CLI.Traffic from outside to inside is translated correctly, but inside to outside is using the outside Interface IP instead of the mapped IP, 50.50.50.50.I know I'm missing something small here.This is the confi...

Hi all,Wonder if someone can help me get my head around a NAT question. I understand how NAT works in a standard setup I.e the firewall or router has an interface with a public ip, but I have seen a global internet out statement on a firewall that si...

I have 2 sites that are connected via a Site-to-Site VPN Tunnel.  And need to allow a Port Range from a core server at site one to site two.Site one:192.168.1.0/24Core Server Address that needs the access:192.168.1.150Ports:6000-6050Rule that I added...

Hello,I have an issue with my 1841. I am trying to access an internal web server with the ip 192.168.0.253 from the internet butconnection gets refused.I am not certain if its a nat issue or a firewall issue.Can anyone provide me with some issue?I am...

                   Q)We have the setup as shown above, our requirement is to access mail server via ports smtp and pop3.But as the mailserver is hosted at internet users at site were not able to aceess. we need to nat a intranet ip with mail server i...

HI,Can we do certification over ASA after CCNA Exam otherwise we have to complete CCNA security for this.Please let me know how much cost I have to pay for the same if possible.Best RegardsVishal M                   

Hello all,I have an ASA that I will like to enable the VPN-3DES-AES license. Unfortunately, we have been using this device for the past few years and the supplier did not supply us with the SKU PAK (white sheet that comes with the box). Is there a wa...

Hi,We have the following flow:LAN Server ( 192.168.100.5 & 100.11 ) -----> Switch -------> ASA ---------> Internet ------------> Destination HostThe ASA's outside interface has Internet IP 202.87.65.22When both Lan servers initiate a connection to th...

Hi all,I have a PIX 515 Ewhich does authentication for SSH via RADIUS protocol and fails over to the local database if radius server goes offline. But when the radius server comes back online, authentication still takes place through LOCAL and not th...

I understand the basic configuration for a VPN traffic and you don't want to NAT it.access-list ACL_1 extended permit ip 192.168.2.0 255.255.255.0 192.168.1.0 255.255.255.0Make sure NAT is not applied to traffic passing across the VPN tunnel:nat (ins...

I would like to add an extended ACL line (in order to use objects) to an existing named standard ACL. I think this should be possible ?access-list <name1> standard permit <  >access-list <name1> extended permit < > < >access-list <name1> standard den...

I am using Anyconnect and I have a group policy configured with a split tunnel policy to "Exclude Network Lists Below".  I created a list to define my local LAN which I don't want to be "secured by the vpn".  Whenever I VPN in, it still forces all tr...