I've tried to get my head around this but beeing used to Juniper and Watchguard devices I just can't get my home webserver published to the outside interface.I have a ASA5505 with ASA version 8.4 and ASDM version 6.4 and the basic license. Outside in...
Dear bossPlease see my attachment.I want to do static NAT 203.88.148.85 ->172.29.1.5 and 192.168.0.241->172.29.1.5That means all outsider will get mail server by 203.88.148.85 and local user will get mail server by 192.168.0.241.For that i did : rou...
Hi, hopefully a quick question on the use of a pair of ASA 5585's in active/active mode with a shared outside interface.Last time I did this was with FWSM, there was a restriction where all contexts that share an outside interface have to be in the s...
Hi guys.Need little help here with Failover, i have configured Failover Active/Standby and it was running few months but now its not working. and when i try to debug it its giving me these messages.vpnfol_thread_timer: HA MSG: no Buffer available for...
I am looking at upgrading an HA pair of ASA5520's from 8.2(2) to 8.3(1), and am just wondering why the huge upgrade in memory is needed. How are Cisco justifying where the additional memory is going to? Are there supposed to be some massive improveme...
Hello, I am using ASA 5505 as a transparent firewall. I have assigned ethernet 0/0 as outside interface and ethernet0/1-7 as inside interface. There are 3 departments in office. So, i connected ethernet 0/1 to Dept A, ethernet 0/2 to Dept B and ...
Ok, I am at a loss on configuring a new ASA5505 for multiple static port translations.I would have expected to simply add several service command to a network object to complete the task, however, the service command overrides the previous and replac...
Hi AllI want to setup my FWSM so that the outside networks can communicate with the inside networks on their real ip address and visa versa. This is not an Internet facing Firewall and only being used to filter traffic between some secure networks, a...
Hi allCan threat detection provoque frequent disconnections on allowed traffic?We are using asa 5520 with 8.3.1 IOSFor instance in ASDM we see SYN attack messages .The source ip address correspond to external an external host (in the outside interfa...
Good Evening Everyone,Got an ACL issue on my 5510. I have set up ACL's for the Inside and Outside interface. Both ACL's are identical right now as I am trying to test an issue. When I run the packet trace command in ASDM I am able to successfully pas...
Hello,Could somebody confirm if Netflow version 9 is available on any version of the Cisco Firewall Services Module please? We have four of these devices that are managed by a vendor and I am told the current version which is 4.0(12) doesn't support...
Hi Guys,I am new to IPS and would like to enhance the security of the Cisco 887s we have, they all have Adv IP Services with IOS 15.0 M7What is required to enable IPS, such as products or licences? (Product Codes would be helpful)What is a basic conf...
Dear All,As i'm facing the issue with Cisco CSC module installed on ASA 5510, It hangs up and doesnt work sometime, so it is bypassing all the traffic without inspection through CSC module. After restarting ASA 5510 box, it works fine as it used to w...
I remember quite some time ago hearing that spam mail on an infected internal system can use any port to send mail out. What I would like to setup is a set of firewall rules to only allow certain packets out through their correct ports, such as DNS ...
