Network Security

I have a question that I hope someone can clarify ... I will be supporting a new ASA 5585X running 8.4 and I was wondering if it's possible to apply an ACL globally instead of it as an access group that is applied to a specific interface as in or out...

I am not able to ping a public IP address of 4.2.2.2 from a device on my network.  Does anyone have Ideas what could be preventing this?A little about my network:ISP > Pix 515 > Switch > Pix 501 > DevicePix 515 outside dhcp setrouteinside(10.100.60.1...

Looking for help/advice with the following problem: We have an ASA5520 running ver 7.0(8), nat-control is disabled. On the "outside" interface we have a closed network which is publicly addressed i.e. no access to Internet. We also have two Vlan inte...

Is it possible to staticaally nat one public ip with multiple lan ip with diffrent services?

Hi,When i run a Packet tracer in PIX, getting a below output:Result:input-interface: outside_interfaceinput-status: upinput-line-status: upoutput-interface: mpls_interfaceoutput-status: upoutput-line-status: upAction: dropDrop-reason: (ipsec-spoof) I...

Hi Everyone,I am very new to working with these devices but am looking for some help in getting the AIP-SSM10 to scan FTP traffic that passes the FW. I have generated the traffic (FTP) and it has been successful, but it doesnt seem to go via the IDS ...

Hello!We have an ASA5520 firewall which is used to secure some servers in the office. One server in the DMZ is accessing a NFS share on a higher security-level interface.To make this work, we have allowed port 111 and enabled sunrpc-server as well as...

I have a 5520 ASA using wccp redirection to our IronPorts on the inside and everything works great for inside users. What I'm trying to do is get VPN users off split tunneling and to filter their traffic through the IronPorts as well but I can't figu...

Is there a way to wipe a 515e clean and get ride of the Failover Only license and just have a basic licesne loaded? I got this off of ebay and I guess I missed where it said Failover Only, and I would really like to use it.Thanks,Jonathan

Hi,I have a internal subnet 192.168.3.0/24 sitting behind an ASA firewal 8.2 and would behind accessing to web server 192.168.11.54 which sits behind the outside interface of the ASA firewall.The access would be like this:1) 192.168.3.0/24 will be ac...

Hi Whenever I use the following command I get an invalid input errorciscoasa#conf tciscoasa (config) # crypto isakmp enable outsideciscoasa (config) #object network net-localciscoasa (config-network) # subnet 192.168.101.0 255.255.255.0              ...

Greetings everyone!I'm working on getting a ASA 5510 set up and am having major difficulties. I'm really new to ASA and coming over from Microsoft ISA. Below is my configuration and I am hoping someone can help me get this all sorted out. As of nwo i...

Hi Experts,I have a ASA 5520 with Public subnet of X.X.X.80/29, ( i.e 81 - 86 usable ips)1) X.X.X.81 --> gateway towards Internet2)  X.X.X.82 --> ASA interface IP.3)  X.X.X.83,84,85,86 --> Used for port forwarding ( Static Nat) on different ports.Now...

Hi,I can not ping the DMZ hosts from my Inside or from other interface Network and vice-versamention below is my ASA Config:: Saved:ASA Version 8.0(5) !hostname Testdomain-name default.domain.invaliddns-guard!interface Ethernet0/0 description + + + +...