Network Security

I have an ASA5520 running IOS 8.0(4) in routed mode, single context with a security license to support 3DES and 750 VPN users.:I setup an L2L IPsec VPN tunnel between this ASA and a Cisco router running 15.x.On the router, I specified transport mode....

All,I have a ton of entries getting logged to my syslog server, but the problem is that I need the particular message that's being logged.firewall :  TCP access denied by ACL from 10.x.x.128/1438 to INSIDE:10.x.x.x/80I'm not seeing a way of doing thi...

I have a issue with TACACS+ authentication with ASA. the following AAA configurations of ASA are:aaa-server TACACS+ protocol tacacs+aaa-server TACACS+ (outside) host x.x.x.x timeout 1 key aaaaaaaaaa authentication ssh console TACACS+ LOCALaaa authent...

We have found that hairpinning an interface on our ASA will resolve a problem, but we're not sure if it's a good or bad idea. Is hairpinning an ok or not ok practice?Mike

Hi,Does anyone know how CSA licensing work? I understand that a licence is assigned when aa client agent becomes active but how can I revoke licences assigned to hosts those are no longer active on the network e.g decommissioned machines etc.Are lice...

Good morning! Can I connect two ASA 5520 as active/standby with UTP cable but without passing through the switch? may be with crossover cable?

Hi Folksam not able to change password on the asa running 7.2 code.i dont have ACS in my network..although i issue the command:username <username> password <password> encrypted privilege 15

I've got a Network object rule to NAT my mail filter address based on SMTP.  It is not set up IP because I have a mail server and filter sharing the same outside address and need SMTP to mail filter and HTTP/HTTPS to mail server.  My problem is the o...

Hi Folksdoes asa 5520 with aip-ssm 20 support code 7.0 Code,if so pls give the link

I would REALLY like to see a command "show run nat in-line" which will display nat statements on one line.Example:ASA# show run natobject network obj-172.16.200.202 nat (INSIDE,OUTSIDE) static interface service tcp www 202ASA# show run nat in-lineobj...

Hii have a 877 with the C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(15)T13, Installed and Added a simple policy map to block certain websites... class-map match-any WEB_CLASS match protocol http host "*facebook*" match protocol http host "*o...

Hi,I bought a 881w and configure it as a ZBF,  As everybody .. I have some problem with the PPTP/GRE Passthrough.Inside the office I have a PPTP/GRE Vpn Server ( 192.168.0.102 ), after a while of troubleshooting, I was finally able to setup a VPN fro...

Pros,ASA firewall with 3 zones inside,outside,dmz are configured. The front end email server in dmz was natted to the public IP (static NAT) and MX  record also updated.The firewall outside IP is x.x.x.171 (Public)Email Nated IP address x.x.x.170 (Pu...