Network Security

I have a issue with TACACS+ authentication with ASA. the following AAA configurations of ASA are:aaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (outside) host x.x.x.x timeout 1 key aaaaaaaaaa authentication ssh console TACACS+ LOCALaaa authent...

We have found that hairpinning an interface on our ASA will resolve a problem, but we're not sure if it's a good or bad idea. Is hairpinning an ok or not ok practice?Mike

Hi,Does anyone know how CSA licensing work? I understand that a licence is assigned when aa client agent becomes active but how can I revoke licences assigned to hosts those are no longer active on the network e.g decommissioned machines etc.Are lice...

Good morning! Can I connect two ASA 5520 as active/standby with UTP cable but without passing through the switch? may be with crossover cable?

Hi Folksam not able to change password on the asa running 7.2 code.i dont have ACS in my network..although i issue the command:username <username> password <password> encrypted privilege 15

I've got a Network object rule to NAT my mail filter address based on SMTP.  It is not set up IP because I have a mail server and filter sharing the same outside address and need SMTP to mail filter and HTTP/HTTPS to mail server.  My problem is the o...

Hi Folksdoes asa 5520 with aip-ssm 20 support code 7.0 Code,if so pls give the link

I would REALLY like to see a command "show run nat in-line" which will display nat statements on one line.Example:ASA# show run natobject network obj-172.16.200.202 nat (INSIDE,OUTSIDE) static interface service tcp www 202ASA# show run nat in-lineobj...

Hii have a 877 with the C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(15)T13, Installed and Added a simple policy map to block certain websites... class-map match-any WEB_CLASS match protocol http host "*facebook*" match protocol http host "*o...

Hi,I bought a 881w and configure it as a ZBF,  As everybody .. I have some problem with the PPTP/GRE Passthrough.Inside the office I have a PPTP/GRE Vpn Server ( 192.168.0.102 ), after a while of troubleshooting, I was finally able to setup a VPN fro...

Pros,ASA firewall with 3 zones inside,outside,dmz are configured. The front end email server in dmz was natted to the public IP (static NAT) and MX  record also updated.The firewall outside IP is x.x.x.171 (Public)Email Nated IP address x.x.x.170 (Pu...