Network Security

A customer recently purchased an ASR 1001 under the impression it could replace their old 3662 router and ASA 5505.  The ASA is configured for their SmartFilter proxy server (N2H2), and I am having a heck of a time finding any documention on how to c...

Well, I tried using the cisco configuration for ASA 5505 for blocking P2P:http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtmlbut this configuration only is usefull with programs like Kazaa, so I try this co...

I have a new remote access vpn I am trying to configure but every time I use a extended acl since I want to only allow RDP traffic no traffice flows at all.  As soon as I change it to a standard acl it all flows fine. Thanks for and help.

Hi, thereOur ISP provider (AT&T) recently wanted to upgrade our system to WAN MPLS andfailed. The internal connections were tested ok, but the internet connection was failed.They claimed that it was the firewall PIX 515 that blocks all the internet c...

The order in the older ios was nat 0 then static.With the new ios how is the static nat treated if i have a nat (inside,outside) source staticNow I need to do some static one to one nats for some servers in the same subnet as the no nat

I Upgraded Same IOS(asa804-k8.bin) on both the ASA and configure Failover its working fine.But when we checked vpn client authentication its working on Primary ASA but for secendory ASA its giving Authentication error.When I down primary ASA its swit...

Hi folks,I have a asa5580 with multiple interfaces. To replicate me databases to another site, I mainly use two interfaces on that firewall. Those interfaces have a steady pace, around 95%. I am wondering when I should consider that the thoughput bet...

Last weekend I upgraded the ASA5510 from 8.0.4 to 8.2.4. As of Monday, I am having a problem. We are currently using a third-party spam filtering service that forwards our email to us. I have an object group setup that contains the host addresses fro...

Hi,I have a 5505 that has been running without any problems until recently.  There has not been any changes.I have a 5505 for a small business that has one web server.  The web server has a static NAT entry to an IP address and not an interface.  The...

I am trying to determine whether or not it makes sense to add a distribution set of switches as part of a ASA firewall design effort or to just bring the ASA's directly into the existing collapsed core/dist pair.Basically, we have a site that has a c...

Hi all,I'm usually not working with this product, but this is what I'm trying to do.I have 2 internal networks setup on our Cisco ASA 5505 firewall. (not done by me, I'm a new to this product)I'm trying to access a server on one network from a PC loc...

Hi AllI have the Pix to ASA migration tool, works very well with normal  firewalls.I am doing a migration that has a Context based Pix firewall. Doesnt seem like the tool works with context based Pix.1) Is there a way of automating this migration?2) ...