Network Security

HiI have an 887, I'm having trouble wrapping my head around the ZBF.I would like to change it to the old style firewall, but using the CCP it says I must delete the ZBF policys first - fair enough, I deleted all the rules so the firewall looks blank,...

Hi all !i have a question about fwsm and how to bypass its session inspections without causing them to drop .scenario :due to number of connections capacity limitations of our FWSM's, we have made a temporary solution utilizing few FWSMs and sharing ...

I'm reposting this here from the VoIP area as I think some in this thread might be able to help:Can someone provide a step-by-step  guide for how to create and upload the proper certificates on an ASA  5505 and CUCM 8.6.1 server to allow for remote i...

Is it me or do vlans not work on the 4ge-ssm card. I can make vlans on the builtin interfaces and they work great.I can create VLANs on the 4ge-ssm interfaces but I can net get them to talk to anything.Anyone else see this happening?asa 5550 ver 8.4(...

Can one setup a packet capture on an ASA for packets entering an IPSec tunnel?   If so, please provide a configuration example.

I am struggling trying to decypher the part numbers for the ASA 5585-X.I have never installed one of these so don't physically know how it all bolts together (other than the hardware guide on CCO).  As far as I can tell its a 2-slot chassis and in sl...

Hi there.I believe that when 2 ASA 5520's are configured for failover with a SSM-10 in each, that the SSM-10 does not automatically failover in the same way as the Firewall.Can anyone confirm this? How does the failover process work?Are there any goo...

I have a little problem, and I haven't find the solution yet. Here is the scenario.I have main VPN site and other 20 VPN sites that are terminating on main site. I have one server that is in private LAN of main site and is static NATED to one externa...

Hi All,I have a small problem. I need to point abc.mydomain.com and zyx.mydomain.com using the same public address to two different servers in my DMZ. I am not sure how to pass this through the ASA. How can ASA interpret that these are two separate d...

Hello -I am trying to determine what traffic is going through the firewall using an "access-list outside-in extended ip permit any any" ACE.   I want to view these logs using the "show log" command on the ASA itself.  I do not have a syslog server se...

Dear all,Please see below config.I can't Asdm through IE for this ASA.I'm using Win 2008 server 64 bit. I that an issue. Already enable http from inside.Already install Java.What do u all think?=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2011.09.28 01:53:40 =~...

I have a ASA 5510 that uses Radius for Authentication.  What I am trying to do is assign each user that logs into VPN to have a specfic static IP based on userid.  I have about 30 to 50 users.  I don't want to complicate this by having them select a ...

Hi All,I have setup the ACS server. when i tried to login into device i am geeting %backup authenticatio error.