Network Security

HiLocal DNS needs to resolve external domains i.e ( www.yahoo.com ). Local DNS Server is placed in the inside network. Acces-list is applied on inside, outside, dmz interfacelocal DNS Server IP : 192.168.10.199Do I need a static-nat to get this worki...

When I upgrade the ios on switches, I just create int vlan1 assign it an ip and subnet, then tftp to my pc that is plugged into the switchport using the download-sw command.I am not sure how to do this on the asa.  Do I just plug my pc into port 0 wh...

Hello,    I will preface this discussion by saying that I'm not sure if this is even possible. On my 5520 I am trying to use one NAT to route all inbound traffic to one private ip (SMTP) and using the same NAT point all outbound traffic from another ...

Tonight was both my 4260 IPS appliance boxes, down.Health Status for Failed Applications                   RedBoth IPS appliance have both interfaces down.Gi eth 2/0 and Gi Eth 2/1 running in Inline-Vlan-PairWhen I reboot one of the boxe, both interf...

I inherited the security positon at the company I am at now. I have cleaned up the configs on the ASA that I am working on from the last person but the only problem is that I cannot remove his account from the ASA. Is this not the right command:- cle...

Hi all,This is one that's come up in the Community before, but none seem to fit my scenario.I'm getting these errors at regular intervals. The source IPs are from my pair of F5 BigIP LTMs that are directly connected off the DMZ interface.Sep 01 2011 ...

The outside IP on an asa is 1.1.1.1/32 and we are using PAT for inside hosts to connect to the internet and all is working.The ISP is also routing 2.2.2.2 to 1.1.1.1, and we have a 1 to 1 static for an inside host to that IP address, the traffic arrr...

Hi, I know there's the bug CSCti38867, but today I've verified that ASA 8.4(2) does proxy-arp on outside interface for static like that:static (inside,outside) static private_ip public_ipbut not for static like that:static (inside,outside) static pri...

Hello,We will be deploying an ASA at a remote site and need internet access to leave from that site.  We have a WSA at our HQ and were wondering if the newer versions of code allow integration between the WSA and ASA using URL filtering.  Thank you!

I am setting up a new pair of ASA 5585's in a multi-context, active/active failover design.  I cannot create management SSH connection to the contexts that are assigned to failover group 2.  With all the security contexts that are assigned to failove...