Network Security

Hi All,My current situation is that I am doing a project at university that will be using 3 Cisco ASAs. I have been given two ASA5510s and one ASA5520. They were given to me with version 7.0 images on them with ASDM 5.0, this i was having issues with...

Hi,I wish to set up a ASA5505 with QoS, and to allow specific port numbers to have priority going through compared to rest of the traffic. Eg ports 21, 80, 443. So for example if im maxing out a torrent, it doesnt impact web traffic etcThe current li...

We have a customized program using Sun RPC. The server is located on lower security interface, client on higher security interface (sorry, have to do this)If we give IP any any rules on lower security interface, by examine all relative packets by wir...

Hi All, I am looking at deploying a pair of 5585X's in an active/active multiple context state.  I am creating Mulitple contexts that need to be able to route to each other.  I was going to deploy a type of Gateway context that has a shared interface...

Hello,Having some major headaches with the configuration of an ASA5510.ScenarioWe have an inside interface, 192.168.10.0/23We have an outside interface, public ip... We have the ASA connected to 5 site to sites, this is working fine and through the i...

Hi,We have recently got 2 of our Cisco ASA 5520 firewalls through RMA. These are supposed to run in a Active/Active Failover Pair. There was only 1 RMA request that was opened for both the firewalls. We have received only 1 Activation key for this RM...

HelloASA8.2 and ASA8.4, first one use classic nat, second ASA twice NAT.I need to incject into ospf global outside adresses which are from NAT pools or static outside addresses.On IOS when defining NAT pool i could add it to routing table.How can i m...

I am currently troubleshooting a firewall policy on a ASA 5505. What command can enter in the CLI to enable live view of traffic been block and which traffic is been allow?In my experiences with other firewall vendors, other firewalls allow me to nar...

TCP OUTSIDE:192.168.1.1/80 INSIDE:10.1.196.77/56825 flags UfFRIOTCP OUTSIDE:192.168.1.1/80 INSIDE:10.34.4.133/1223 flags UIOTCP OUTSIDE:192.168.1.1/80 what is diffrence between two flags

Dear all,there was remote FTP - users behind ASA5540 can connect to it.Now, with this ftp there is SSL/TLS encryption added and users behind this ASA can't connect to this FTPS.It this possible for users behind ASA to connect to FTPSs?Regards

I am actually going to setup my ASA 5505 with two different outside ISPs such that half of inside lan networks will be natted into 1 ISP and other half of the inside lan networks will be natted into other ISP ,so this means1.1.1.1/24  is our one ISP2...

We have a need for an inside address to have more than one static NAT outside addresses.  I know this wasn't possible before 8.3.X code.  I still can't quite get it to work with 8.4.X code yet.Here is what I had with 8.2 code.static (inside,outside) ...

Default FWSM inspection policyHow does traffic inspection works ?Traffic with Inspection On is sent to the Control Point for Deep Paket Inspection and tarffic not being inspected takes Fastpath.For ExampleIf I remove SQLNET from default inspection , ...