Network Security

hello folks,can someone please help I'm trying to block traffic entering one interface but with no success. Can someone please help??? config below#!interface Vlan955 nameif fwsm-ServerFarm-WEB security-level 50 ip address 10.20.34.94 255.255.255.224...

Hi,We set up multicast routing as advised in configuration guides.The details:- We use ASA 8.4(1) , enabled multicast-routing - source is on the outside interface- receivers are far away in the network core on the inside interface- we use pim sparse ...

I've got an ASA 5510 running 8.4I have a host on an inside interface, with a static NAT configured on the ASA. The inbound/return half of the NAT doesn't appear to be working.Config summary:object network nat-test host 192.168.100.98access-list outsi...

Hi,To cater redundancy for EM we have created 2 EM service: EM-1 & EM-2. I can find both of these EM services on any IP phone, i can login as well. The problem that i am facing is: once i logged in chssing EM-1 or EM-2, if i press the Service button,...

Hi all. This is complicated, I'll try to explain succinctly. I have an ASA that is one end of an IPSEC tunnel. The IPSEC tunnel dumps traffic off onto the ASA, but instead of forwarding to the next hop, we see a log entry like the following: Mar  7 1...

8.4(3)I need to outside PAT all incoming UDP (SIP/RTP) traffic from outside to an internal IP. The following command makes it work:nat (outside,inside) source dynamic any obj-10.0.0.173 service udp udpBut it breaks DNS resolution from inside. If I ad...

Hi everyone,which ASA 5500 model can best be recommemded for the following specification?Number of Internal users: : 150 UserDo you have an external router handling routing of packets internally and externally- if no, do you need the Firewall to do a...

HI there.I've been asked to configure a VPN to a remote office location and to NAT my Office VLAN behind one fixed IP.My office VLAN: 172.16.101.0/24Assigned static IP: 172.16.101.250Remote Office: 10.192.0.0/24I am ok to configure the VPN and IPSEC ...

Hi community,I would like to schedule automatic backups of our ASA5500's OoO-hours:1. SSH from secure server and create _FULL_ backup - what would be the CLI command(s) ?2. SCP from secure server and retreive file(s) - what is the location of the fil...

I have turned on anti-spoofing on all interfaces on an ASA 5520 HA pair running 8.4(3).I am getting some RPF fails, but when i check some of the source and destination addresses i dont see why it has failed.The source packet came in on the inside int...

I have installed ASA 5520 firewall and 1841 Cisco router. firewall is connected to internet and the router. Router is connected to Network. There two networks available. I have completed the configuration. but problems. i dont know how to do the band...

Hello,    Just started using our ASA 5505 v8.2 (1)Trying to configure the ASA applaince to allow access into an internal resource (i.e want to be able to RDP into a system behind the ASA from the internet).I have used a static NAT:static (inside,outs...

I am migrating an asa 5520 from 8.2 to 8.3 and after the migration the ACL's are blocking access to the DMZ. It looks like the NAT functions were migrated properly by the migration tool but now when I try to access devices in the DMZ the ACL is denyi...

Good morning,I have been configuring a cisco ASA 5520, everything is working fine but when i create an ACL: access-list OUT extended permit ip 172.16.x.x 255.255.255.0 anyaccess-group OUT out interface outsidei added ports like www or 443 and it is n...

Hi Guys, facing an issue here and need some expert knowhow....I have several interfaces on my ASA  that is also connected with S2S  to the HQ office...i have 3 /24 subnets heavily subneted inbetween interfaces and have a collapsed core as well so any...