Network Security

We have a 5510 running 8.4(2) and ASDM 6.4(3) and I don't see the nonat statements above the translated statements after upgrading from 8.4(1) to fix an ssh issue. They are there in the CLI, and I added one more, then exited and brought it back up ne...

Hi All,I have a query regarding order of NAT processing with the following configuration (as an example):nameif ethernet1 inside security100 nameif ethernet2 dmz1 security50nat (inside) 0 0.0.0.0 0.0.0.0static (inside,dmz1) 192.168.0.0 192.168.0.0 ne...

I have an ASA5520 (8.2 version of firmware) whose physical ports are all taken. I want to add a subinterface, but I believe I have set it up incorrectly:interface GigabitEthernet0/0description Ethernet to 2800 router (internet gateway)speed 1000duple...

I have a current ASA (5540, 8.3(2)) that is running in routedmode, doing a VPN endpoint as well as a wirewall for anotherinside network.  They use the single public IP addressthat is on the outside interface, which carries thedefault route.I want to ...

Hi All,I am proposing Remote access VPN solution to my client as per the attached diagram. However they are required IPS solution as well.So in this case i dont think i can implement the IPS with outside interface in inline mode because of the encryp...

Hi all,We have an  ASA Version 8.0(5)19 as our firewall.We are trying an cloud service on the internet and found that the ASA is removing the X-Forwarded-For on the header on the surf traffic.Is it posible to not remove the X-Forwarded-For in ASA?Reg...

Hi Experts,I am using my private network on inside interface as 192.168.90.x 255.255.255.0 & I recevied 4 ips 172.16.1.20 , 172.16.1.22, 172.16.1.54,172.16.1.10 from My client.Now I want to nat . Please tell me what would be the nat statement.Thanks ...

Hi,I have 10 different segments in ASA 5520, so i created 10 VLAN in ASA & made the inside interface as Trunk that connects with core switch. Now i need to run OSPF in the ASA..Is this possible? & How??

Hi!I'm looking fot a way to do static URL blocking with ASA and when the URL is blocked present a "Web Page" to the user saying that it's been blocked.So, i was wondering if i can use the http parameter "spoof server string" to replace the original U...

Hi,We ave 2 6509 switchs configured in VSS mode with a FWSM module in each switch. We have also a licences of 20 contexts for each FWSM module.I've read that in the release software 4.0(4) of the FWSM, the integration and deployment of FWSM in a VSS ...

Scenario - A firewall with 3 interfaces inside(172.30.1.0/24), dmz(17216.1.0/24)., outside(200.200.1.0/24).  A static NAT is created for DMZ server (172.16.1.10) to  public IP (200.200.1.10)static (dmz, outside) 200.200.1.10 172.16.1.10 netmask 255.2...