Network Security

We have a ASA up for a few years now and I am finally trying to understand some of the syslog info.  I configured it yesterday to email any Alerts and Emergency messages.  In the past 21 hrs I have received 511 (I'm glad I had conversation view enabl...

I have a one-to-one NAT configured (mail <-> xenon), however, I am unable to configure ICMP to respond on the external IP of the NAT.  Below is my config, there is extra ICMP cruft that I have been trying that is probably not necessary, but any help ...

Hi Guys,Could you tell me if I can do destination NAT (class C network => class C network) on Cisco ASA running 8.2? (or another version).For example, will destination NAT like this work:static (inside,outside) 8.2.2.0 10.10.8.0 netmask 255.255.255.0...

Hi guys,My question is connected with IPv6 routing and ASA.My simple lab network topology:PC======ASA 5520=======Router 2801I've assigned following IPv6 Subnets:PC-ASA:Network is 2001::3000:100:/104ASA has 2001::3000:101:1/104PC has 2001::3000:133:13...

Hiis it possible to password recover a 4240 from rommon, the same way you would with an ASA 5500 ??If not how do i do this?

Hello,     I have one ASA5520 with version 8.4(3), and a few ACL rules defined. One ACL is permit traffic from one interface(EXT_SERVICE) to another interface(DMZ_SERVICE), if i change that rule to deny traffic, all new connections that match the rul...

I have a subnet for guest network access, both wired and wireless.  We have a Netgear ProSafe that is trunked to a Cisco 2901 performing 'Router-on-a-Stick'.  For most internal traffic, it all stays behind the ASA.  But for guest traffic, I have a ro...

i get a syslog message  "deny tcp (no connection) from 173.46.173.5/16220 to HGREAK_GLB/443 flags RST  on interface outside" when I am trying to access a website that is on my DMZ from internal.  The browser displays "cannot display the webpage".  Pl...

Hello,Is there an easy way to allow our public VLAN to only access the internet, but not the other networks? I think there are two ways to do this:- Outside is Security Level 0, Public is level 10 and all inside networks are above 10, for example 100...

Hi All,I'm in a sort of "half way house" situation with an ASA running 8.3(1), a range of public IP addresses and a requirement to access many different internal hosts using a series of port forwarding options. I have read (and understand fully) the ...