Network Security

Hi,Wondering if on the ASA (8.4) its possible to do something like what DNS rewrite does, but with IP requests.  Scenario.  Mobile phone accesses a web app inside our network fine over cellular.  Once it comes inside on to wifi it still has the publi...

Well the time has come to upgrade our Pix 515E's in production. So I have a few design questions.We also use a 3015 concentrator to handle all of our inbound VPN and site - site sessions.Approx 150 remote users and 20 site - sites.Our main internet l...

Suppose I have an ASA with only a /30 subnet on my outside interface going to my ISP (I have one IP, the ISP has one and then I'm out usable addresses for the /30).  If I want to add a second ASA for active/standby redundancy, do I absolutely have to...

Hi,Suddenly ASDM configuration tab is not dispalying but device wizard startup configuration.I was using this for ages. By the way, I am logged in as admin <15>.Please help.Marcin.

HiIs the FWSM EoS? I found this announcement:http://www.cisco.com/en/US/prod/collateral/modules/ps2706/eol_c51-699134.htmlBut reading it, it announces only the EoS of the old Sup720 blades in the details. :-)

Good day all,im sure that this questing has bin asked many times. but i can't figure this this out.one of my customers has a mail server. i have nat and firewall rules that permits smtp/https access on 1 of there public ip adresses.now we need revers...

Hi CSC,I am attempting to do nat in the following order:1. DestA (Translated DestA1) <-> Real IP (Egress A)2. DestA (Translated DestA2) <-> Real IP (Egress B)3. DestA (Translated to Egress A) (using PAT) -> Real IP (Egress A)Would option 1 and 3 clas...

Hello all,This problem is killing me.  Makes me feel like crying.  Maybe giving this game up and clean toilets for a living.    Sorry but WHY did Cisco have to go screw with something that JUST WORKED in 8.2 and eariler.  It's simple really, but I ca...

Ive migrated from my lab pix to a lab asa and am trying to open certain ports to my internal network.in my confg on my pix i had acls to open port 51413 to an inside host along with the static nat rule. what i am trying to accomplish is same on my as...

I read a number of older posts indicating that there was no ability to walk the arp table on an ASA 5510; wondering if that has changed at all?If not I'm looking for some workarounds.  Is there a syslog message that is generated when a new arp entry ...

I am having some issues with using regex and uri filtering. I have a client that has public web cams for the zoo so people can view them. They had an issue with an outsider going to the configuration section of the camera and changing the IP scheme. ...

We have had an ASA5505 for close to two years. About a year ago, we added a second ISP ("BOB") which became our primary and our old one (SBC) became our backup. I successfully modified the config for this and it's been working well.Now we're changing...

evIdsAlert: eventId=1287530989864443762 severity=high vendor=Cisco alarmTraits=2147483648   originator:     hostId:     appName: sensorApp    appInstanceId: 665    signature: description=AD - External UDP Scanner id=13004 created=20061120 type=anomal...