Network Security

I have an issue which I am struggling to resolve. I have been approaced  by a potebtial customer who have an ASA which has an Inside interface, Outside interfac and DMZ interface.- They have a live web server on the DMZ for example 192.168.10.50 acce...

Hello All,I have tried to restrict access to loopback interface using ACL's with no luck. Does anyone know how this can be done?Thanks,Ram

Hi,is there any possibillity to generate a syslog message, if a time based acl ends ?example config:time-range T_Apr27 absolute end 23:59 27 April 2011!access-list NAME extended permit tcp host x.x.x.x host y.y.y.y eq 1500 time-range T_Apr27the rule ...

I need to use HTTP inspection to block certain URLs, but I need a way to informe users that they requests were blocked.Is there anyway in the ASA to show a "page" saying "your request was blocked"? Or any way to redirect those request to a cative por...

Hi, when I connect to VPN with ASA 5510, can not connect to web applications in http instead https in other applications are working properly. how can I fix this? Thanks

Hi,My customer is having Cisco 4507R switch with IOS version 122.31-SG1 which deosnt supports NAC - L2 IEEE 802.1x but supports NAC - L2 IP.What is the difference between these features and which features is required for proper authentication and pos...

Hi all,every time i try to copy a file on disk0 the asa does an reboot before finish writing file to disk0. I test it with tftp, asdm, ssh and many different files. Always aborting the writing...disk0 255426560 bytes total (172392448 bytes free)Does ...

Hi Forumer'sJust seeking idea on how to design on redundant firewall design1. branch firewall got dual uplink, which normal time is using primary line connect to HQ. If connection to HQ fail, then will swap to secondary link for ensure connection res...

is it possible to introduce a failover firewall without dedicating a interface on each firewall for connecting the two.  we currently have one asa and want to add another one for failover but all interfaces are used, do we have any options? can we do...

ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src outside:192.168.13.50 dst DMZ2:192.168.13.15 (type 8, code 0) denied due to NAT reverse path failureCant seem to get around this one yet. I have a remot...

I just upgraded my cisco asa 5510 from 8.2.1 to 8.4.1. Now my VPN is no longer working. I can connect to it but can connect to anything from there. The heard the asa creates a log from the upgrade to show me what part of the config doesn't carry over...