Network Security

I am going through http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.pdf and I have a question about nat exemption.  According to the guide above, the migration of nat exemption will look like this:-----access-list inside_nat0_ou...

Hi GuysI have the following in placeinternal network IP: 172.1.1.1 Natted to  DMZ IP of 192.1.1.1 I require thart the internal machine is able to access the internet however this is not happening and when checking the traffic logs I can see that it i...

Hi there,We have enabled inspection of RPC on TCP Port 135, to inspect the MS RPC response and dynamically open the ports.We have created a DCERPC Map with te following settings:Pinhole Timeout : 00:15:00Endpoint-mapper service:enforcedEndpoint-mappe...

Hi Expertsasa 5510 with 8.2 IOSwhy we put the same ip when we try to coonect from inside to dmz?ex:DMZ Server 50.50.50.50Inside: 10.10.10.10static (inside,dmz) 10.10.10.10 10.10.10.10why not static (inside,dmz) 50.50.50.50 10.10.10.10????????????????...

Can anyone please help me with this...I can access my webmail server from outside my network, but only if I type in the public IP address, eg https://webmail.mycompany.com does not work, but https://204.123.12.245/owa(not actual) does.  I am by no me...

Hi,started this on friday at about 5 pm am about at the point of throwing my hands up in the air from frustration.  I am trying to configure a dmz for a ip camera to be viewed from the outside. I had tried to set this config to NAT 10.1.35.5 to 2.2.2...

I have IOS content filtering using the Trend Micro subscription service working on a 2911 running 15.1.(3)T3 with the security license option and a 30 day demo Trend subscription. Once I figured out that the content filtering for Trend appears to be ...

Since I manage and maintain at least 100 ASA's of different images and ASDM versions, I am unable to install ASDM on my PC, however under programs in the start bar I have a list of links for most of them. A few though are broken, How do I add them? I...

Hi,I would like to ask you something:I have a cisco asa firewall with 8.4 version and i want to create an access control list to enable the internet only to users from a group from the ldap server.When i try to configure the access control list i wri...

Hi,We have configured our ASA5540 in active-standby failover.We are observing that current active session count is twice of session count before configuring HA. Earlier average active session was 50000 and now after HA it is around 100000. Kindly let...

Hi,I have a CSM 3.2 SP2 and i need to upgrade to version 3.3.1, i already checked the installation guide for the version 3.3.1 and it says that i have to do all the upgrades in this order:3.2 SP2 -> 3.3 -> 3.3.1But when i run the installer it shows a...

Hello everyone.  Hopefully someone will have the knowledge to help me out here.  I'm working with two ASA 5510's that are loaded with the same hardware/software and set up with Active/Active failover.  Before we started to have issues both of the ASA...