Network Security

Hi guys,My question is connected with IPv6 routing and ASA.My simple lab network topology:PC======ASA 5520=======Router 2801I've assigned following IPv6 Subnets:PC-ASA:Network is 2001::3000:100:/104ASA has 2001::3000:101:1/104PC has 2001::3000:133:13...

Hiis it possible to password recover a 4240 from rommon, the same way you would with an ASA 5500 ??If not how do i do this?

Hello,     I have one ASA5520 with version 8.4(3), and a few ACL rules defined. One ACL is permit traffic from one interface(EXT_SERVICE) to another interface(DMZ_SERVICE), if i change that rule to deny traffic, all new connections that match the rul...

I have a subnet for guest network access, both wired and wireless.  We have a Netgear ProSafe that is trunked to a Cisco 2901 performing 'Router-on-a-Stick'.  For most internal traffic, it all stays behind the ASA.  But for guest traffic, I have a ro...

i get a syslog message  "deny tcp (no connection) from 173.46.173.5/16220 to HGREAK_GLB/443 flags RST  on interface outside" when I am trying to access a website that is on my DMZ from internal.  The browser displays "cannot display the webpage".  Pl...

Hello,Is there an easy way to allow our public VLAN to only access the internet, but not the other networks? I think there are two ways to do this:- Outside is Security Level 0, Public is level 10 and all inside networks are above 10, for example 100...

Hi All,I'm in a sort of "half way house" situation with an ASA running 8.3(1), a range of public IP addresses and a requirement to access many different internal hosts using a series of port forwarding options. I have read (and understand fully) the ...

Hi,Got a pair of 5510's in Active/Passive failover config. Been in and running for about 9 months. Running 8.3(1)About 3 weeks ago I started seeing the units failing over on an almost daily basis. Failover has hardly ever happened before then.Can any...

I've got email logging for a few specific syslog messages working and sending to an email server on the inside network.  However, the source IP ends up being the DMZ interface.  Is there a way to force it to use the inside IP instead?ASA Code Version...

Hi, try do configure DNS translation for static NAT.it fails with this error message: Failed to generate delta configThe following command have not been recognized by the Configuration Parser:==============================(DMZ,OUTSIDE) static (hostna...