Network Security

Hi I was wondering if there is a tool to convert router ACL to Cisco ASA ACL? I have huge number of router ACLs that need to be moved to my FWSM , doing it manually will be a nightmare !!!Any ideas ? Thanks Sent from Cisco Technical Support iPad App

Hi,I'm trying to run ZBFW on a 2811 with IOS version 15.3(T4) and I'm running into a strange issue I'm not quite sure how to troubleshoot.I have 3 zones, internet, local, and ssl-vpn.The rules I'm trying to enforce are: all traffic from SSL-VPN can g...

Hi,I have this 2x ASA5540 firewall and notice the it is configured with a standby ip. The firewall is run in Active/Passive mode.However, the standby ip of this firewall is not point to the seconday firewall and vice versa for the primary firewall.AS...

Hi. We are planning on the move to ASA 8.4 version from 8.2, I see there are some changes in the Static and PAT commands in new version. There are huge sum of lines for static NAT entries in the current ASA 8.2, if these will get translated by itself...

Hi All,I tried looking in ASA documentations but unable to find out that how many IPSec Tunnels can be terminated to an ASA cluster. I have 5545 running only two IPSec Tunnels so far but need to terminate 18 sites all up and would like to confirm how...

I have a ASA5505 8.2(5)  Apparently it has crashed. On boot is get to "Begin to dump crashinfo to flash...." and hangs forever. All I can do is power cycle it to get to the same point.  Is there a way to skip the dump?  I can get to rommon during boo...

We have a situation where we were to setup a tunnel from a remote site to our internal net. We wereto provide an internal subnet that the remote site used to NAT from their net to the provided subnetfrom which they can then access other internal subn...

I recently purchased Botnet for an ASA and have it configured and working properly. I am however curious on who is responsible for its database content. I have seen it block many IPs that are from reputable sources with a "High Risk" label. IPs that ...

Hello, can you please point out a comparison between C2921 router firewall and ASA5510. Also, do you think C2921 can replace ASA 5510? Thanks.

static (inside,outside) tcp 4.2.2.2 443 10.1.2.3 443 netmask 255.255.255.255What happens/is translated when a packet comes from the Internet destined for 4.2.2.2 with ..........A:Src tcp port 1025 and dst tcp port 443B: Src tcp port 443 and dst tcp p...

I'm setting up a new ASA that will be used for L2L VPN.  I am setting up a tunnel that will need to permit all of our internal RFC1918 address through with no NAT.In pre 8.3, we used a nat 0 command with an access list.  However, that is now gone.My ...

Hello experts,I need your help on the below issue.I have ASA 5510 installed with ASA ssm 10 IPS module. This module was faulty and got today RMA from Cisco. It comes with the below image pre-installed.sensor# sh verApplication Partition:Cisco Intrusi...