Network Security

Hi all. This is complicated, I'll try to explain succinctly. I have an ASA that is one end of an IPSEC tunnel. The IPSEC tunnel dumps traffic off onto the ASA, but instead of forwarding to the next hop, we see a log entry like the following: Mar  7 1...

8.4(3)I need to outside PAT all incoming UDP (SIP/RTP) traffic from outside to an internal IP. The following command makes it work:nat (outside,inside) source dynamic any obj-10.0.0.173 service udp udpBut it breaks DNS resolution from inside. If I ad...

Hi everyone,which ASA 5500 model can best be recommemded for the following specification?Number of Internal users: : 150 UserDo you have an external router handling routing of packets internally and externally- if no, do you need the Firewall to do a...

HI there.I've been asked to configure a VPN to a remote office location and to NAT my Office VLAN behind one fixed IP.My office VLAN: 172.16.101.0/24Assigned static IP: 172.16.101.250Remote Office: 10.192.0.0/24I am ok to configure the VPN and IPSEC ...

Hi community,I would like to schedule automatic backups of our ASA5500's OoO-hours:1. SSH from secure server and create _FULL_ backup - what would be the CLI command(s) ?2. SCP from secure server and retreive file(s) - what is the location of the fil...

I have turned on anti-spoofing on all interfaces on an ASA 5520 HA pair running 8.4(3).I am getting some RPF fails, but when i check some of the source and destination addresses i dont see why it has failed.The source packet came in on the inside int...

I have installed ASA 5520 firewall and 1841 Cisco router. firewall is connected to internet and the router. Router is connected to Network. There two networks available. I have completed the configuration. but problems. i dont know how to do the band...

Hello,    Just started using our ASA 5505 v8.2 (1)Trying to configure the ASA applaince to allow access into an internal resource (i.e want to be able to RDP into a system behind the ASA from the internet).I have used a static NAT:static (inside,outs...

I am migrating an asa 5520 from 8.2 to 8.3 and after the migration the ACL's are blocking access to the DMZ. It looks like the NAT functions were migrated properly by the migration tool but now when I try to access devices in the DMZ the ACL is denyi...

Good morning,I have been configuring a cisco ASA 5520, everything is working fine but when i create an ACL: access-list OUT extended permit ip 172.16.x.x 255.255.255.0 anyaccess-group OUT out interface outsidei added ports like www or 443 and it is n...

Hi Guys, facing an issue here and need some expert knowhow....I have several interfaces on my ASA  that is also connected with S2S  to the HQ office...i have 3 /24 subnets heavily subneted inbetween interfaces and have a collapsed core as well so any...

Hello,I have a ASA5510 running asa841-k8.bin and ASDM 6.4.The CSC-module is a ASA-SSM-CSC-10-K9 running CSC SSM 6.3.1172.0.The module is reachable via ping and session via cli.If I try to connect via ASDM I get the error, that the Management-Port of ...

I would like to understand what configuration pieces need to be in place for SunRPC inspection to work properly. I have the following scenario: NFS server is on higher security interface, and NFS clients are on lower security interface. I have defaul...

Hi,I'm trying to migrate a configuration of an ASA 5520(Version: ASA 8.0(5)) to an ASA 5585 (Version: 8.4(2)). I keep getting some errors which are included below. I've been struggling with these for some copule of weeks and read the documentation on...