Network Security

Hey Guys,I'm beating my head and probably missing something simple, I have an ASA running 8.4(2) 5520 trying to do an inbound NAT from the internet to the machine.  THis is what I did interface INETsecurity-level 0 interface DMZ security-level 90 obj...

Site A ASA5550 with vlan1, vlan2, and vlan3 <~~ HeadquarterSite B ASA5510 with vlan1Site C ASA5505 with vlan1Site A is a HQ and we have Site-to-Site VPN set for all sites with IPsec IKEv1 IPsecSite A <--> Site BSite A <--> Site CProblem is on Site A ...

Hello all,I seem to have a weird issue with ASA 5510 which is actually resolved but would like to share it.We have a cisco 3745 which has a public LAN port. It has the IP 1.1.1.1/24 ( for example) assigned to one of it's fastethernet interfaces. On t...

I have   newly deployed network. I have  two ASA5520-AIP20-k9. both connected to ISP and configured as Active/standby failover. the ASAs were working fine at first but later on, the  internet connection becomes very slow. the ping reply i am getting ...

HiCan anyone provide me the details regarding flags when excuted show local-host command.I am geeting flags as UfFRIO and some times UB.Does it indicate malicious traffic.

We're upgrading from ASA 8.2 to 8.4.  Our current config as some NAT0 rules with any.  I inherited this config, so I'm not sure why they are written this way.  But apparently the NAT conversion tool has a bug (CSCtf57830) that prevents proper convers...

Hi,I have a problem with an asa 5540. The internal flash (disk0) is not working anymore.I would like to use the external disk1 flash to store the startup configuration otherwise every time I reboot I have an empty configuration.Is this possible? how ...

Hello all.I think the answer may be "not possible", but thought I'd run it by experts first.We are planning on multicast video/audio streaming the speech our company president gives during an upcoming "End of Fiscal Year" party.We will multicast it u...

Which is best Cisco firewall for small organisation. (1-100)---Posted by WebUser Bhushan Kumar

I'm trying to study for the CCNA Security test and need to be able to setup zone based firewalls instead of CBAC. I have tried all of these images and when the SDM loads (v2.5) it has CBAC firewall, not zone-based:c1700-adventerprisek9-mz.124-23.imag...

I see in the list of possible protocols when importing plugin into the SSL Portal on the ASA version 8.0.(4)7.Does someone know where to get the plugin for the ASA SSL VPN Portal for TN3270 Emulation?The plugin name implies one is available and we su...

Hello,  I have a Cisco Pix in my test lab and someone has put some 3000 access-list remark lines on it and I'm having a hard time removing those. I've tried tftp new config after deleting those lines on notepad, didnt work. I tried to simply delete t...

Hello,I can't move traffic (isakmp udp_port: 500 & ipsec nat traverse udp_port: 4500) from my dmz to the  outside interfaceThanks...