Network Security

Hi Guys,I currently have a LAN-based failover setup between two 5510s. The failover link is a crossover cable. In the current setup, if I unplug the crossover cable both units become active. From what I understood from Cisco documentation, each unit ...

FTP access thru an ASA5510 to an ftp server on the private had been working fine.  Suddenly today there is no access from the outside but inside users have no problem.I ran a packet trace with animation and the 5510 says the packets are being dropped...

Hi all,The customer forgot the password for the ASA SSM-20 ips module installed in ASA 5520 Fw.show module in customer FW shows it up state. I brought it to our office teat bed. here it show ASA1# sh module Mod Card Type                              ...

Ok so, I have an ASA acting as a firewall for a bunch of hosted servers, includig a bunch of Small Business servers. Each customer server is on its own vlan and are trunked into the asa. My office mail server is on the inside interface. Outside   xxx...

Hi all,We tried to upgrade our SMA to 7.9 version via both CLI and Web Interface.But we had this error:Download error: http://updates.ironport.com/asyncos/zeus-7-9-0-107/hints/default/1What should we consider?Thanks in advance.Nurullah.

I have a pair of ASA 5520s in active/standby failover mode, single context.  I'll be migrating to multiple context mode later this week.  Do I need to break failover first?  Or if I don't need to, should I?  Or can I do this while maintaining failove...

We have a hub and spoke VPN setup and at one location used the DMZ port/vlan subnet to access the hub. We have since changed and want the DMZ to only access the outside interface (have base license that can only access one interface). We have taken o...

Hi Expertsuser 192.168.1.10 --> ASA 1-----> ASA 2-------> ASA 3---->  server (172.21.16.15)We have opened 3389 , 80 & 445 ports on all firewalls ( ASA 1, ASA 2, ASA ) for server (172.21.16.15) from (192.168.1.10).We are able to see connection in ASA ...

I have a site with an ASA5505 and 2 isp connections but the catch is the 2 isp's are giving me a dynamic IP so I am unable to use thishttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtmlAny idea?h...

We have a cisco ASA 5505 with sec bundle plusWe have two ISP's: ISP1 (Our IP = 30.100.150.50, gateway 30.100.150.8)ISP2 (Our IP = dynamic, gateway 20.100.150.9) - ADSLOur internal LAN IP range is 10.9.8.0/24We want to configure the ASA 5505 to allow ...

Hi All,We are trying to implement the ZBF on our router to assist us in limiting the intial impact of DDOS attacks.We have configured the below and it appears that it's not working, as when un der attack the statistics don't increae.Any assistance wo...

I installed a new ASA 5512-X over the weekend for a client.  Their backup ISP connection is DHCP based.  I need to use the 'dhcp client route track' command on the interface, but it is not available.  However according the all the documentation I am ...

Hi Everyone!I was hoping you guys could assist me with an issue ive been running into.We are trying to do some policy NATing, and running into issues because the ASA is looking at the route table before making a NAT decision.According to the document...