Network Security

Hi,I need to introduce a TMG inside one of our branches networks so  the default internet traffic pass through TMG and then to the ASA as per  the new standard. I am new to TMG and playing with few  designs on how  to set TMG up as painless as possib...

Hi,I’ve configured 2 ASA5520 firewall, one with DCHP server setting and the other one with DHCP client setting. The problem is the DHCP client unable to get an ip address from DHCP server. The configuration for both are as follows. ToplogyDHCP Server...

Is there a way to NAT based on availability of a protocol?  Put another way can the ASA have a NAT entry for a web server that includes a primary inside address, and a secondary inside address to use in case the primary isn't responding?I know this i...

Hi all, I've not used a cisco for a few years now so apologies if this is just complete garbage!  Can you filter out inbound http url's to a specific host?  So to 1 host I want to allow http://host.com:8181/site and that's it, I do not want to allow ...

Hi all,I need to able to ping Cisco ASA inside interface IP from outside connected network.Basicaly outside interface connected to private link to HQ. Now we would link to monitor connection from HQ to branch by pinging Branch ASA inside interface IP...

Hi,I'm trying to deploy new ASA functionality Identity Firewall in our demo lab but I've faced a problem in losing IP-User mapping.After the user has logged on everything is ok, ASA builds User-IP mapping, establishes connection and the has ability t...

Some background info - I've recently switched to an ASA 5510 on 8.4(3) coming from a Checkpoint NGX platform (let's say fairly quickly and without much warning ). I have a couple questions and they're kind of similar so I'll post them up. I've read d...

Hi, we all do know CBAC on our routers, we create 'deny all' on the outside  interface for all traffic coming IN. CBAC is going to open the ports for  all traffic coming back and deny everything else that was not  originated in the LAN... and you can...

Boa tarde.Estou tendo problemas com usuários que tem um client VPN da Microsoft no computador deles, quando eles acessam via VPN fica na tela de autenticação de usuário e senha e não conecta, o acesso é para um servidor VPN Microsoft, quando não pass...

Hello everyone,I can no longer SSH to a primary active firewall. It had all of a sudden stopped working.  However I am able to SSH to the secondary standby firewall without any problems. I did try to regenerate the RSA key on the primary fw, but stil...

Existing Network setup:*************************we have core switch (cisco 4510) & its default route is towards core router (cisco 3845) only.we have one Bharti & Tulip internet link. Bharti internet link is connected on Bharti internet router (Cisco...

Hi  ,I  am using  Cisco  ASA5510 Firewall in my network. The  IOS  is Software Version 8.0(5)24.The Flash is  512 MB and  DRAM 1GB  on the ASA.I want to  upgrade the IOS  on my Firewall and use the Latest one.Please provide me the Upgrade  .Also  ple...

Hello,I thought I had found a nice way to add Service(s) to be available publicly. I thought that this site would allow me to add autmatically the NAT and ACL entries, you would ususally have to do in 2 separate steps, in just one step. So I jumped r...