Network Security

Hi, thereOur ISP provider (AT&T) recently wanted to upgrade our system to WAN MPLS andfailed. The internal connections were tested ok, but the internet connection was failed.They claimed that it was the firewall PIX 515 that blocks all the internet c...

The order in the older ios was nat 0 then static.With the new ios how is the static nat treated if i have a nat (inside,outside) source staticNow I need to do some static one to one nats for some servers in the same subnet as the no nat

I Upgraded Same IOS(asa804-k8.bin) on both the ASA and configure Failover its working fine.But when we checked vpn client authentication its working on Primary ASA but for secendory ASA its giving Authentication error.When I down primary ASA its swit...

Hi folks,I have a asa5580 with multiple interfaces. To replicate me databases to another site, I mainly use two interfaces on that firewall. Those interfaces have a steady pace, around 95%. I am wondering when I should consider that the thoughput bet...

Last weekend I upgraded the ASA5510 from 8.0.4 to 8.2.4. As of Monday, I am having a problem. We are currently using a third-party spam filtering service that forwards our email to us. I have an object group setup that contains the host addresses fro...

Hi,I have a 5505 that has been running without any problems until recently.  There has not been any changes.I have a 5505 for a small business that has one web server.  The web server has a static NAT entry to an IP address and not an interface.  The...

I am trying to determine whether or not it makes sense to add a distribution set of switches as part of a ASA firewall design effort or to just bring the ASA's directly into the existing collapsed core/dist pair.Basically, we have a site that has a c...

Hi all,I'm usually not working with this product, but this is what I'm trying to do.I have 2 internal networks setup on our Cisco ASA 5505 firewall. (not done by me, I'm a new to this product)I'm trying to access a server on one network from a PC loc...

Hi AllI have the Pix to ASA migration tool, works very well with normal  firewalls.I am doing a migration that has a Context based Pix firewall. Doesnt seem like the tool works with context based Pix.1) Is there a way of automating this migration?2) ...

I want to know, why few connections in the pix/asa doesn't contains any flag value, they just contain "-" & rest is blank.UDP outside x.x.x.x:11167 inside x.x.x.x:44417, idle 0:01:43, bytes 161, flags -UDP outside x.x.x.x:28141 inside x.x.x.x:44417, ...

Hi guys,Please see the attached diagram.I am having a server LAN in 10.216.153.0/24 and from here server have to reach other server LAN beside ASA 10.123.252.0/24in between is 6500 sw with FWSM module. And i have created a context for this in transpa...

Currently have a Cisco ASA5520..there is an internal application that communicates on port 80 with an outside host but is not HTML protocol.the ASA seems to block this traffic... any idea why?