Network Security

HiI have a customer that has to perform an upgrade in their deployed ASA appliances, we gave them an ASA for testing but it has the 8.4.2 version and they need the 8.2.1 for performing their local tests, is there any guideline to perform this?ThanksA...

I am building out 2 virtual firewalls using contexts in an active/active F/O pair, and would like to know if it is necessary to assign at least one interface to the admin context?My other contexts will have outside, inside, DMZ and stateful F/O inter...

Hi,I am planning for an VSS in Core but firstly I need to upgrade FWSM which is at 3.2 Ver to 4.0.4 (min release) I have checked software dependenciesbut not sure about Hardware Dependency  on Fwsm and Chassis for Eg. Rommon Upgrade on Chassis. Pleas...

I have been having problems accessing hosts connected via the inside interface on an ASA 5520.  The thought just occured to me that the interfaces are gigabit ethernet and the outbound connection is an 100 mb connection.  Could this be the cause of m...

I have branch office having subnet 172.26.48.0/22 one ip from this subnet say 172.26.48.100 assigned toa server . now our erequirement to access this server from outside mean from internet . tis branch office is coonected throuth leased line to main ...

Hello together, perhaps somebody had the same problem and found a way to solve it. We access our customer-networks over IPsec-Tunnel with D-Nat:Our Site is hidden behind a single Address (Service-Pat), the remote sites are accessed over /27 networks,...

I have successfully been able to allow outbound access from inbound hosts  on the appliance; however, I have only one outbound IP address and had to configure outbound access using static PAT.  What I need to do is to configure access to certain inbo...

HelloMy config:ip inspect name CBAC tcp timeout 10ip inspect max-incomplete high 100int fa0/1ip access_group permit_all inint fa 0/2ip access_group permit_all inip inspect CBAC inAccess-list on both interfaces accept all ip traffic.What happens when:...

Hi, I am trying to allow SIP communication through our Cisco ASA firewall but I get the following error in the logs. It's almost like looping with these two error message. I have removed Inspect SIP from the global policy map and configured it under ...

Hello,We can´t reach DMZ servers from other DMZ servers. It's very strange.If I make a ping from DMZ server to another, sometimes only recieve one ping, sometimes 4, sometimes 0.How can I allow the traffic between DMZ servers??(ASA 5520 Version 8.4)R...

Hi All,I have installed ASA5505 in the network. Port forwarding has been done for one of the server in our LAN. Public users are able to access the server successfully. I am trying to access from inside using the same Public server IP, but unable to ...