Network Security

Hi,I am working on an ASA7.1. Dynamic NAT is working, but static NAT is not working as expected. Static NAT config is as below:static (Inside,Outside)  tcp 202.162.181.202 telnet 10.64.0.254 telnet netmask 255.255.255.255'show nat' shows hits after t...

Hi there,We have a new installation of a ASA 5505 and are trying to get some NAT issues straightened out. Here is the scenario: On our internal network, we have two servers running Filemaker Server, a relational database server that clients connect w...

Hi,We are going to start implementing WCCP. We want to configure WCCP2 on our firewall and redirect traffic from our inside interface to the web cache engine. I've read several Documents on the subject but it's still a little vague.If we want traffic...

Could anyone let me know what is the use / impact of adding one host IP in IDSM under - configuration- trusted host? I am trying to add a host IP which is generating legitmate traffic(to exculde this IP from reporting), however, I would like to get m...

Hi allwhen I migrated the ASA config from 8.2 to 8.3, in all groups the group members has been replaced by the IP address object. However, the "name" for this object has been migrated, but there is the "object network name" configuration missing.What...

Hi All,      THis is a common problem.      we have firewall and VPN router,  I know VPN router can deploy before or after firewall, and parallel.     which one is better!     thank you!Fly

Hi Guys,          I see that 113011 message id log shows user specific group policy. what is the difference between these two log?But i see they have different name. 113009 also shows vpn group name which is assigned to that particular user.<166>Apr ...

Hello,I would like to connect a second ISP link to our ASA 5510 to solely serve http traffic from our organization's employees (ie. web surfing). We currently have all employee traffic and two site-to-site VPN tunnels connecting to the internet from ...

I have a customer with a Cisco ASA 5510 firewall, an inside network containing a Genetec video recording server, and cameras installed on broadband modems throughout the area (each with a public IP). They've recently purchased Axis Q6034-E cameras th...

We recently have problems with some clent ftp to our ftp site when they were using ftp active mode. And the session was terminated by the FW, ASA 5580.%ASA-4-406002: FTP port command different address: 174.129.205.194(10.204.138.136) to ftp.ncbi on i...