Network Security

Hi,One of my client is trying to setup ACL  using FQDN instead of using ip addresses, like permiting specific abc.com on port 999. Is it posible to do that on ASA ( version 8.0), if it is possible then how to do that?Thanks

Hello all, I have a question about Nat. I have configure a pool of IPs to be mapped on a public IP.i.e Range 10.1.1.2 - 10.1.1.5 to 91.200.21.xso that all requests coming to that public IP will be redirected to the internal IPs.object network Exchang...

I'm having problems understanding how to allow access from a DMZ interface to an internal interface.We have:DMZ |ASA > switch > ASA -- InsideThe DMZ is 172.16.10.12Inside is 10.10.1.6How can I allow 172.16.10.12 access to communicate to 10.10.1.6?The...

Can anyone help me with setting up an ASA 5505 to be used as a firewall between a BT internet router(BTNet service) and a Cisco 3560 Lan switch. BT have presented me with a cisco 3800 series router with the following details:Network Address     Netwo...

Hi all...I have a PIX 515 with 6 interfaces.My goal is NOT to have redundant ISPs.  My initial goal is to provide a 2nd public IP address that can receive email in the event that my primary WAN link goes down.So far, this is what I have.interface eth...

I tried the solution posted at https://supportforums.cisco.com/message/3390056#3390056 however it did not work on my ASA5505 8.4(2). I thought that it may be because I only have a single public address so the web server is responding to port forwardi...

We had to do a force failover from active to standby with failover configured.Everything went fine except all Cisco IPT phones 9950 (Sip based), they reset. I have no clue why.does somebody have some insight about the sessions that should be replicat...

Hello,Our company has recently upgraded our firewall from a Borderware Steelgate v7.1 platform to a Cisco ASA 5520 platform.  Needless to say the interface on the Cisco platform is much more complex and I don't have much experience working with firew...

I have 2 internal networks:Eth0/1 192.168.0.0/16 - LANEth0/2 192.168.5.x/24 - GuestI am trying to NAT an external IP to a Guest host. I create a policy idential to ones that are currently working.Is there a trick to having NAT policies goto multiple ...

ASA 5505 configured for WebVPN connecting to Citrix Web Interface.i have a ASA 5505 that I am attempting to configure for WebVPN with passthrough into Web Interface .  The user authenticates into WebVPN OK and gets the option to click on the Citrix L...

Cisco IPS Manager Express 7.1.1device: ASA-SSM-20 7.0.(1) E3I configured the email notitifications page under Perferences  to receive an email for High and Medium events and I can get emails when I do "Send a test Mail". But when a real High or Mediu...

Hey all,Quick question.In terms of configuring the IPS, what's the difference in the experience using the CSM vs. the IME? I have a PC running IME here at office but I'm having issues installing the CSM so I haven't been able to try it out. I am, how...