Network Security

I've got a 5520 running 8.4(1).I've setup a simple NAT:object network Test host 10.10.10.1object network Test nat (inside,outside) static 1xx.xx.xx.xxxI've also got a trivial access-list:access-list inside_access_in_1 extended permit ip host 10.10.10...

Hi,I am configuring a new ASA 5510 to replace a SonicWall and I have a problem with an HTTP Connection inside my LAN.PC from the LAN ( using ASA LAN interface as gateway) can't Connect to a Camera video Web Server (192.168.4.20) on Port 80 whereas I ...

Hello,Today, there were multiple users who all of a sudden could not access the internet.  When I logged onto the firewall I saw that http scanning was disabled.  We actually always have it enabled, but 2 days ago I had to disable it to allow downloa...

I just got to a new environment and the asa we have has 8 utilized ports, mainly as such:corp_inside, corp_dmz1, corp_dmz2, customerA, customerB, customerC, corp_outside and the last interface is for failover10.1.1.0       10.1.2.0       10.1.3.0    ...

Hello Guys,I'm using NAC 4.8, and I'd like to login using NAC Web Agent on Ipad.When I'm trying to do that, I'm receiving a message on Ipad that I need to install Java Plug-In, but there is no JavaPlug-in available for Ipad.Does anyone know if there ...

I know you can have a static policy natstatic (inside,outside)  10.1.1.1 access-list bobBut what if you want to nat a network. In other wordsI want all 10.72.36.0 to be changed to 172.21.6.0 one for one mask 255.255.255.0static policy nat doesn't app...

Hi, i was wondering if anyone has encountered a difference in download speeds between using an SSH client and just using HTTP?  We notice that the SSH client can download the same file at lightening speed as compared to using HTTP.  Wondering if it's...

Hello,Can CSM 3.3.1 manage IPS 7.0(5)? I am having an issue setting up Global Correlation, where i cannot deploy DNS settings via a shared policy to any 7.0(5) sensors. Deployment goes through, however dns changes do not take affect.Thanks in advance...

Hi my name is IvanI would like to work with two ASA's 5550 in HA (Acitve-Standby)  like perimetral firewalls and also work with another ASA 5540 but like a SSL VPN Remote Access to end users.Please could you help me how can i do it?. Wich will be the...

I am seeing occasional ICMP Network Sweep w/echo events from my IPS module. The attacker IP address is in our VPN range accessing internal servers (domain controller, server running our administration system). I don't think these are problems but I'm...

Hi All,  I am encountering an error in ASA-SSM module as as "WebSession::sessionTask TLS connection exception: handshake incomplete. Messages, like this one, in the category - TLS connection failure - were logged 7 times in the last 249621 seconds." ...

We have an ASA 5510 firewall.  There are 4 ports on it configured as 2 outside, one inside, and one DMZ.  We have two cable modems attached to the outside ports.  Our plan is to have the "inside" port directed to one outside port/cable modem, and the...