Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Resolved! Latest signature update

Dear All, We would like to update our sensor with the latest signature set. Please find below the current running sensor details. AIP-SSM# sh configuration! ------------------------------! Current configuration last modified Wed Nov 23 16:03:43 2011 ...

Serial Number Problem

I have a faulty ASA5520 and I am not sure if I have a SMARTnet contract for it or not (I manage over 200+ ASAs)The problem is that the Serial Number sticker that is normally on the back of the ASA is missingThe ASA5520 is also faulty and doesnt power...

ASDM multiple network objects vs group for rules

I was just curious if there are any performance benefits of using multiple network objects on multiple rules vs consolidating them into fewer rules by grouping them? For example, I have about 10 lines of NAT exempt rules from the same source to mult...

Resolved! ASA5505 8.4.2 nat (outside,inside) black hole

I am new to the ASA series and I am at a complete loss as to why I cannot configure this router to forward SMTP and RDP traffic to an internal host. The packet trace tool in ASDM shows complete end-to-end connectivity for RDP but it still fails to co...

Recommend a replacement for PIX-506E

I'm looking at upgrading our T1 to a 10 mbps EoC connection. Currently we have a 506 PIX. What ASA model would be a good replacement. We are a medium size manufacturing company currently with 80 workstations accessing the internet.

ASA 5505, Transparent mode and Mac address table

I have an ASA 5505 in transparent mode. The device mac address table is always empty. show mac-address-table and show mac-learn both come with empty response.any idea?thanks,Han

Pix515E 6.3.5 - Capturing VPN traffic on inside int ?

Quick question. I have a site - site tunnel that is up and running between a Pix 515E and a 3050 appliance.Tunnel is up and running but on the pix side I dont see traffic from a couple of subnets behind the inside interface.On the vpnallow access lis...

Resolved! After convertion to 8.4.2 code

Hi All, I have converted an appliance from ASA 7.2 to 8.4.2 Everything is working but I was wondering if I can delete the following configuration lines in the code. In 7 code we were using 'names' but now is everything refrenced to objects. Can we de...

Xbox live

I have an ASA 5501 running latest code. Per the article at http://support.microsoft.com/kb/908874, I need to open the below ports. I have 5 Xboxes (when people come over) and they all have a static IP. My network is 192.168.0.x and is a /24 network.X...

Resolved! ASA publishing

hello i have ASA firewall and three seperate web servers. and i have 1 public ip address. i need to publish all this web servers with this ip address. how can i make asa to nat packets according to the web addresses? Thanks

Exclude source/destination ip on ASA log?

Can the ASA allows to exclude source ip/destination ip on its log?I have some source/destination ip addresses kept filling up the sys log that I don't want to see those on the log. I guess I could filtered out by message ID number; but the rule is no...

Wrong default Gateway VPN IPSEC ASA5510

Hi,I've configured a VPN IPSEC on my ASA5510. It Assigned IP/NETMASK/Gateway via a DHCP Server on the LAN.The problem is that when a client is connected to the VPN , it takes the right IP and NETMASK. ( 192.168.1.109 / 255.255.255.0) but the Default ...

Resolved! DMZ to "outside only" traffic

Hello all.This is my first time on this board and I'm also quite new to ASA, so I apologize if I have a too simple question.I have a classical "inside + DMZ + outside" configuration.I also have a mail server in DMZ which have to be allowed to reach a...

Firewall syslong analyze

Hi All,We have a Kiwi syslog server in our network to monitor and analyze the syslogs from our Firewalls.We are getting the complete syslongs from 1-7Now I need to analyze all the syslogs which are important and needfull.Can someone tell me what all ...