Network Security

ASA Support for Suite B

We have an ASA 5520 that uses LDAP to authenticate VPN users with our Server 2008 R2 SP1 domain. We would like to convert to Secure LDAP so that the passwords are encrypted when they are checked against AD by the ASA. Our CA issues Suite B certificat...

DMZ servers unable to reach internet

I had the ip address conflict problem on the dmz network, i removed proxyarp on the dmz interface on the firewall it sorted it. Another issue i am experiencing right now is that my natted DMZ servers are unable to reach the internet. what could be re...

Policy NAT question, ASA 8.2

Hello, I'm hoping that someone can straighten me out. I don't have a ton of experience with ASA's and I've inherited one that I need to support. Currently it has several IPSec tunnels terminating on it. There is one tunnel that connects to an offi...

Resolved! asa 5505 licening

HiI've got a ASA5505(ASA5505-BUN-K9), and i'm hitting the user limit, more and more offen. So i'm looking in to upgrading the licene to unlimited and at the same time i'm looking at the security plus bundle...So i'm a bit in doubt, if i can just buy ...

Resolved! CSM and ASA5525-X

Will the latest version of CSM (4.2 sp2) manage the new ASA 5500-X series and their IPS's? The client I am at has version 4.1, but I don't want to upgrade them to 4.2 if it's not going to gain them anything.I checked around the 4.2 documentation and...

Resolved! IP Conflict with ASA DMZ Interface

Hello there,Anyone experience this? I've never seen this before ...A host in DMZ segment is getting an IP conflict with the ASA DMZ interface itself. Any address assign to the host, always says IP Conflict.

Resolved! cisco ips ssh timeout

Hi team,How would i configure cisco ips sensors for the timeout of ssh connections...ips 4200 running 7.x versions.regardsRajesh

ASA and Mobile AnyConnect

What version of ASA software allows you to do mobile Anyconnect? I am hoping only 8.2. Currently I am running 8.0(4).

Cisco Lync 5067 TCP (TLS)

I have one machine with SBS2011 installed which has 2 nework cables connected to a CISCO asa 5505. One cable is connected for DMZ to the EDGE (which is not configured yet).On the SBS2011 I have 2 virtual machines running (HyperV) , one for Lync FE (M...

ACL and security levels on ASA

Hi,I am trying to understand how ACLs and security-levels work together on ASA. Here are my Qs:If no ACL is applied, then by default, traffic from higher security level is allowed to go to lower security level. Then based on the stateful inspection c...

Resolved! cbac set-up

Can I confirm with someone if that config of cbac will work:

difference ASA5510-BUN-K9 and ASA5510-Sec-Bun-K9

Hi ASA 5510 have two model Bun-K9 and Sec-Bun-K9from the datasheet find out difference Port related and Redundancy.My questions is : Have any major difference for Security service between two model ??.RegardsIqbal

Firewall conf issue........

Hi Below is Firewall / Switch and my router configurations, from firewall i am able to ping my LAN pc 172.22.0.10 / 172.22.1.10 and outside ISP 172.23.43.33 and 172.23.43.13 but from my PC unable to ping that out IP's ...................pls. suggest....

ASA 5585 connected with two Act/Stby core switches

Hi all,Let me know the concept of configuration of both senarios. Senario 1Needs to route ISP traffic to the act/ ASA and if act ASA is down , stby ASA will have to take over. How to configure virtual ip on the router interfaces Senario 2:As same a...

Resolved! Reg:FWSM router mode issue

Hi,I have a Cisco FWSM installed on Cisco 7613 router,the topology is like mentioned below, 7613+{FWSM}------3560---------3560----[10.220.0.0/29,10.220.1.0/29,10.220.2.0/29] Here we created a p2p link between 7613 gig port and switch3560 gig...