Network Security

Hello,I have an ASA 5510 with the security plus module to provide Gig speed on our interfaces.  We are migrating from a Pix 515E and I have the Pix-To-ASA Migration tool to assist.  What is confusing to me is looking at the ASA in a factory configurt...

hello for best fourms and all membersi bought cisco asa 5540i have cisco router 2811 with static ip XX.xx.XX.x/30and make nat to conected to internet pat natand have XX.xx.XX.x/29 for exchange server lan ---- asa---router ---interneti want to confiur...

I have a question that I hope someone can clarify ... I will be supporting a new ASA 5585X running 8.4 and I was wondering if it's possible to apply an ACL globally instead of it as an access group that is applied to a specific interface as in or out...

I am not able to ping a public IP address of 4.2.2.2 from a device on my network.  Does anyone have Ideas what could be preventing this?A little about my network:ISP > Pix 515 > Switch > Pix 501 > DevicePix 515 outside dhcp setrouteinside(10.100.60.1...

Looking for help/advice with the following problem: We have an ASA5520 running ver 7.0(8), nat-control is disabled. On the "outside" interface we have a closed network which is publicly addressed i.e. no access to Internet. We also have two Vlan inte...

Is it possible to staticaally nat one public ip with multiple lan ip with diffrent services?

Hi,When i run a Packet tracer in PIX, getting a below output:Result:input-interface: outside_interfaceinput-status: upinput-line-status: upoutput-interface: mpls_interfaceoutput-status: upoutput-line-status: upAction: dropDrop-reason: (ipsec-spoof) I...

Hi Everyone,I am very new to working with these devices but am looking for some help in getting the AIP-SSM10 to scan FTP traffic that passes the FW. I have generated the traffic (FTP) and it has been successful, but it doesnt seem to go via the IDS ...

Hello!We have an ASA5520 firewall which is used to secure some servers in the office. One server in the DMZ is accessing a NFS share on a higher security-level interface.To make this work, we have allowed port 111 and enabled sunrpc-server as well as...

I have a 5520 ASA using wccp redirection to our IronPorts on the inside and everything works great for inside users. What I'm trying to do is get VPN users off split tunneling and to filter their traffic through the IronPorts as well but I can't figu...

Is there a way to wipe a 515e clean and get ride of the Failover Only license and just have a basic licesne loaded? I got this off of ebay and I guess I missed where it said Failover Only, and I would really like to use it.Thanks,Jonathan

Hi,I have a internal subnet 192.168.3.0/24 sitting behind an ASA firewal 8.2 and would behind accessing to web server 192.168.11.54 which sits behind the outside interface of the ASA firewall.The access would be like this:1) 192.168.3.0/24 will be ac...

Hi Whenever I use the following command I get an invalid input errorciscoasa#conf tciscoasa (config) # crypto isakmp enable outsideciscoasa (config) #object network net-localciscoasa (config-network) # subnet 192.168.101.0 255.255.255.0              ...