Network Security

Can one setup a packet capture on an ASA for packets entering an IPSec tunnel?   If so, please provide a configuration example.

I am struggling trying to decypher the part numbers for the ASA 5585-X.I have never installed one of these so don't physically know how it all bolts together (other than the hardware guide on CCO).  As far as I can tell its a 2-slot chassis and in sl...

Hi there.I believe that when 2 ASA 5520's are configured for failover with a SSM-10 in each, that the SSM-10 does not automatically failover in the same way as the Firewall.Can anyone confirm this? How does the failover process work?Are there any goo...

I have a little problem, and I haven't find the solution yet. Here is the scenario.I have main VPN site and other 20 VPN sites that are terminating on main site. I have one server that is in private LAN of main site and is static NATED to one externa...

Hi All,I have a small problem. I need to point abc.mydomain.com and zyx.mydomain.com using the same public address to two different servers in my DMZ. I am not sure how to pass this through the ASA. How can ASA interpret that these are two separate d...

Hello -I am trying to determine what traffic is going through the firewall using an "access-list outside-in extended ip permit any any" ACE.   I want to view these logs using the "show log" command on the ASA itself.  I do not have a syslog server se...

Dear all,Please see below config.I can't Asdm through IE for this ASA.I'm using Win 2008 server 64 bit. I that an issue. Already enable http from inside.Already install Java.What do u all think?=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2011.09.28 01:53:40 =~...

I have a ASA 5510 that uses Radius for Authentication.  What I am trying to do is assign each user that logs into VPN to have a specfic static IP based on userid.  I have about 30 to 50 users.  I don't want to complicate this by having them select a ...

Hi All,I have setup the ACS server. when i tried to login into device i am geeting %backup authenticatio error.

I have a Pix 501 running 6.3 code sitting behind a cable modem.I use  ip address outside dhcp setroute because I don't have a dedicated IP from my cable provider.How do I configure the Pix to host VPN connections from my iPad when offsite?Since the o...

Just a general question to the group on how one monitors Internet availability/reachability via an ASA.The scenario right now is we have a number of offices with Internet feeds (primarily DSL/Cable/T1) connected to ASAs and we have the goal of being ...

Dear all I have ISA server 2006 sp1 and i can install many good softwares to management of network like gfi web mon, soft perfect bandwidth manager and many more. And I have an ASA 5520 AIP-SSM module so what security management Asa can give and what...

Hello everyone and thankyou for taking the time to read this question.My company is bringing up a new accounting/Time and Attendance suite in November and the question of access as been asked over and over again.  They do not want to expose the webse...

Guys, can you help me ..In access list log we can know how much the access-list have been hit by traffic. In my firewall access-list there is a list doesn't hit by traffic. I want to delete my access-list which don't used for a month or more. Can I k...