Network Security

Hi,I have configured ASA, having one outside interface (security level 0), one Inside Interface ( security Level 100).Access list created: At outside from source any destination any services ip and icmp are permit.                              At Ins...

Hi all. Here is my situation. On our ASA 5505 We have a DMZ configured to use 2 ports, which are used by the mail and Web servers. So far everything works perfectly and this router has been very stable. Now I need to add more ports in order to accomo...

I have a ASA sitting as Internet gateway. Because part of the company is using public addresses and other parts are using 10.0.0.0/8 addresses, traffic coming to the inside interface is a mixture of source addresses in public space and private addres...

Hi all,I wish to block some url that users have access through my LAN Thats  i wish to block icmp,access towards such sites, i wish to block icmp  because dns will resolve the domain and they can access through ip  address.what i have in place is a c...

Is there any way to get ACE's information in the syslog's which would be helpful for reporting purpose. It seems as of now, the syslog just bear the ACL information.Is there any configuration required to add ACE's information in the syslog?. Please g...

Hello all, I hope this finds you in good spirits.I have recently upgraded my ASA 5510 to 8.3 code and honestly I am confused on the best and most efficient way to do many nat translations through it.  I have a group of about 100 IP's that need http/h...

How to find the reason of last reboot in ASA with CLI or ASDM?

Hi, I am intertested in knowing if there are any differences in the following configurations in terms of performance especially, security, functional restriction etc.ASA 5550 HA Pair running 8.41.  Creating a port-channel using 5 physical interfaces....

Hi all,I have two pix with a tunnel between them and both have full access to outside. As it is today all local networks use the local pix to get access to outside. What I would like to do is to route all outgoing traffic for one port via a dedicated...

Hi All,I've been asked to look into setting up our 2 x ASA 5510's in failover and have a couple of questions that I hope somebody can answer for me.For the purpose of my questions details are as follows:- A stack of 3 x 2960's (IP Address 10.152.#.25...

HiI have an IPS 4240 & IME V7.I was wondering how i can upload a new config file & save it to flash. I know i can just console on & copy & paste it in, but is it possible to upload the .txt file using copy tftp flash: or using the IME, or can i copy ...

DearsI am trying to configure multi context on the 5520 ASA , how can i configure 1 outside and 1 inside for the 2 context or how to configure both outside from the same subnet and insides also from the same subnet , i did the below configuration but...

I have an ASA 5510 and I need to implement a DMZ.  I know I can either plug devices directly into a port on the ASA or use subinterfaces to create multiple DMZs with different levels of access if I don't have enough ports, and then use a switch.  So ...