HelloI have 2 web servers that replicate between them (two different internal ip). My idea is that if one of them will not work, the other to do the relay.I have a Cisco ASA 5505 I can do a nat for each machine. How should I set
Hi I'm neewbe in cisco asa configuration.we are running with a Dlink Netdefend Firewall and because of planning to install a oracle database we intend to migrate to cisco asa 5505 appliance.Our configuration is very simple but the oracle daabase is n...
How can I make the following more secure?:access-list from_outside permit esp any any We have currently have it on our firewall and I know it's not the most secure. But I want to make sure our tunnels still work.Thank you,Thomas
I have configuired nac but login page when i am entering user name password then password field becom empty and nothing happendinterface GigabitEthernet1/0/18 switchport trunk encapsulation dot1q switchport trunk native vlan 998 switchport trunk allo...
Hi,I need to know if the following configuration is doable with the asa ?I have twp isp and each isp allocate a range of public IP. I have a database interface and a dmz and inside interface.What i need to do is to make all my databases and my server...
HII want to give access to remote subnet on firewall 5505. Can you please help me how to do it...Remote subnet is 16x.15X.56.0Here is my access listaccess-list outside_5_cryptomap extended permit ip 192.168.12.0 255.255.254.0 16x.15X.56.0 255.25...
The following line was in our firewall config so I removed it completey for security reasons.access-list from_outside permit icmp any any Is there any reason to allow icmp into our network at all? In other words, should I allow it to certain areas o...
Hey,We're using cacti for some monitoring tools. And i can easy get graphs for the Active NAT translations.But we would like to have also a view on the allocated ip's for a nat pool. Is there an OID for this? Or do you've got an idea how we can check...
I planning to integrate cisco asa5505 device in runing enviornment for filter ip traffic.Internet ----router----ciscoasa----lanIp series is public(25.263.25.0/24) througout of network (no privateIP)now how do I set asa in such case and filter traffic...
Dear Support-Team,I installed ASA-5510-CSC10-K9 to one of my customer.My customer likes to know who is coming into the firewall from outside including VPN users also.He needs to about them through the mail.Please help me to configure this.Regards,Jan...
Hi everyone.I purchased a SA520W for my company, and i have some probles for configuring firewall.I want to deny access to facebook, youtube and twitter but not for 4 hosts which needs this websites for work.I tried to configure content filtering > b...
Hi, in the ASA Migration Guide for Version 8.3 says about real ip address: "All of the access-listcommands used for these features are automatically migrated unless otherwise noted"But my ACL's have not been migrated to real ip address. In my migrati...
Dear all,Currently im working with ASA5510 software version (asa803-k8.bin). I have CSC module installed on it.. I tried to block the website (facebook.com) using (*facebook*). if users try to get to facebook.com using http session it is easily bloc...
Hi everybody!I'm having an issue with an ASA 5505 and I don't know if anyone knows a solution.I have several ASA 5505 widespreaded in branch offices with a VPN. I'd like to manage them from central office, it is from their outside interfaces.The IP a...
I have successfully depoyed a zone based firewall on an ISR and almost everything is working great. The only problem I am having is with SFTP not working. Any thoughts? Here is my config.class-map type inspect match-any inside-outside-cmap match p...
