Network Security

Can someone describe to me how you would configure a VPN tunnel on a remote peer that connects to an ASA that has route tracking enabled. How would you configure the tunnel when the peer address could be one of two different addresses? Thank you!!Sen...

Launch BIOS Extension to setup ROMMONCisco Systems ROMMON Version (1.0(11)5) #0: Thu Aug 28 15:23:50 PDT 2008Platform ASA5520Use BREAK or ESC to interrupt boot.Use SPACE to begin boot immediately.Boot interrupted.                               Manage...

I have a request for blocking urls using a class map. I have made this work with HTTP, however it does not work for https. This is a 2851 router with IOS Version 12.4(15)T7. I see i could use the command "match protocol secure-https" however this doe...

Hello,I'm replacing a new ASA 5505 due to a corrupted flash.  On the original unit, I had the ability to SSH into the device using TeraTerm with no problems.While configuring the new device, I entered the following commands to enable SSH into the uni...

Hi,One of my client is trying to setup ACL  using FQDN instead of using ip addresses, like permiting specific abc.com on port 999. Is it posible to do that on ASA ( version 8.0), if it is possible then how to do that?Thanks

Hello all, I have a question about Nat. I have configure a pool of IPs to be mapped on a public IP.i.e Range 10.1.1.2 - 10.1.1.5 to 91.200.21.xso that all requests coming to that public IP will be redirected to the internal IPs.object network Exchang...

I'm having problems understanding how to allow access from a DMZ interface to an internal interface.We have:DMZ |ASA > switch > ASA -- InsideThe DMZ is 172.16.10.12Inside is 10.10.1.6How can I allow 172.16.10.12 access to communicate to 10.10.1.6?The...

Can anyone help me with setting up an ASA 5505 to be used as a firewall between a BT internet router(BTNet service) and a Cisco 3560 Lan switch. BT have presented me with a cisco 3800 series router with the following details:Network Address     Netwo...

Hi all...I have a PIX 515 with 6 interfaces.My goal is NOT to have redundant ISPs.  My initial goal is to provide a 2nd public IP address that can receive email in the event that my primary WAN link goes down.So far, this is what I have.interface eth...

I tried the solution posted at https://supportforums.cisco.com/message/3390056#3390056 however it did not work on my ASA5505 8.4(2). I thought that it may be because I only have a single public address so the web server is responding to port forwardi...

We had to do a force failover from active to standby with failover configured.Everything went fine except all Cisco IPT phones 9950 (Sip based), they reset. I have no clue why.does somebody have some insight about the sessions that should be replicat...

Hello,Our company has recently upgraded our firewall from a Borderware Steelgate v7.1 platform to a Cisco ASA 5520 platform.  Needless to say the interface on the Cisco platform is much more complex and I don't have much experience working with firew...