Network Security

  i have a customer having 2 FWSM installed in VSS 6509he  was not able to access them , on same time communication between clients and Database behind firewall was disconnected.he Reload both FWSM module in sequence resolve the problem.i need to inv...

                   Hi,We run some Cisco ACS applicances at the moment and our remote agent is installed on our domain controller / active directory server which are soon to be moved from windows 2003 server to a VMWare windows 2008 R2 64bit platform....

Hi all,how can I setup that the backup connection will start but after 30s of icmp timeout the default gateway (tracket object - 192.168.1.1)My configuration:sla monitor 123 type echo protocol ipIcmpEcho 192.168.1.1 interface outside num-packets 3 fr...

Hello there,I am configuring remote host blocking on SSM-10 within ASA to make shun on certain signatures. SSM-10 resides on the same ASA on which it should perform shun action. But unfortunately it doesn't work. ASA version ins 8.4(3) and IPS versio...

We are replacing our EOL Watchguard X1000 Firewall(s) with Cisco ASA 5510 unit - ASA Version 8.4(3).  Following is the static NAT I have build and the corresponding access list.nat (FW2Inside,FW2Outside) source static BW_XSP1_Private BW_XSP1_Public d...

Hello,Let me start by saying that I'm just starting to study for CCNA, so the ASA seems to be a bit above me yet.  The ASA's we are using is for VPN to our corporate office and only allowing access to our Citrix environment, so no direct internet all...

Need to setup some static NATs for some networks and IP ranges. Rather than setting up 50+ individual NAT rules I'm thinking 8.3 or 8.4 supports snat for networks?Example73.11.200.88/29 and 192.168.0.64/29so 73.11.200.88 would always be static NAT fo...

I have a third party firewall behind a Cisco ASA. The Cisco ASA is doing PAT as there are no other IP addresses available. The third party firewall is attempting to build an IPSec tunnel to another firewall. The IPSec tunnel is not coming up. When I ...

Hi,I have a query. I am using a 6500 with FWSM. I need to separate an internal server/HQ network from 3 or 4 different external connections. The external networks do not necessarily need to be isolated from each other.I have the option of using a 3 l...

Hi,I have an SSM module in an ASA 5510, when I try and change the host IP the SSH session to the ASA freezes and returns with a timeout error. After issuing the show module 1 details command the configuration remains the same.I am using the session 1...

Hi:I have multiple internal networks.192.168.3.0192.168.20.0192.168.21.0I am currently overloading the entire 192.168.3.0 network to an outside interface .xxx.76.40.19Can I also overload portions of the 192.168.20.0 and 192.168.21.0 networks to the s...

I have 2 ASA 5540's that I want to run in HA A/F.  The active ASA has an IPS module running.  I no longer need this and would rather remove it than purchase another module for the spare.  What is the process to do this safely? After removal will the ...