Network Security

I'm trying to traverse from my inside private IP address (10.x.x.x) to my public IP address translation (172.16.x.x) in order to take advantage of the ACLs that are already applied on my outside interface.  For example:Host 10.0.0.1, translated to PA...

Hello,I'm using Netflow on our ISP's Cisco internet router.  It sends Netflow info to the outside interface of our ASA and I PAT UDP port 9996 (Netflow) to our Netflow server that sits on the inside of the ASA firewall.  the problem I have is I just ...

Hi,I would like to know how to NAT multiple webservers to one public IP on port basedi.e. i have 2 internet facing webservers (a.b.c.d & e.f.g.h) on the DMZ zone but have only one public IP (x.x.x.x). I want to access both these servers on the same p...

Hi there,Recently upgrade the two ASAs to 8.3 code. Besides all of the fixing up that had to be done and the few things I had to wrap my head around, all is good with the upgraded config. Now my problem is that any new rules I create throught the ASD...

HI,Have an issue with FWSM (4.1.3) and DHCP Relay.Where the DHCP request is being forwarded and the reply receieved but it is not getting to the Server (which is in continue request state) to obtain the IP Address.XXXXXXXXX/TC3inside# DHCPRA: relay b...

Hi. I have a 5510 authenticating successfully with a RADIUS server.  I'm using it for VPN authentication and it works great.  I would also like to do this for adminstrator access to the ASA.  When I turn it on though, anyone that can authenticate for...

Hello,We have Cisco ASA 5510 256RAM running 8.2.4 with CSC 6.3.1172.4, it slows down internet traffics drastically when we do speed test, we get something like thisIt the computer is bypassing the CSC, it getsThis was done when there's very low traff...

Hey guys,This might actually go into Networking Basics because of the nature of the problem, but I tossed it in here because of the Cisco product involved. Long story short, I need to do some detective work to figure an apporpriate IP address for a N...

We have 2 FWSM in Active / Active mode. for one of those context.The another context, now it's in test mode, and we like to protect some segment of servers, in this segment we have Two Citrix Netscaler to provideload balance to a web service that we ...

Hi expert,I have configured in a C3925 router, with IOS version 15.1(2)T3 two ip sla probes to two different destinations.with a mib browser and HP NNMv9, i see in the rttMonEchoAdminTargetAddress location(.1.3.6.1.4.1.9.9.42.1.2.2.1.2), the same wro...

Hi Expert,we are using firewall ip as default gatewaywe have allowded icmp from firewall , still we are not getting firewall ip in tracert command.Thanks in advance.Regards,Surya

Ok, the bit that works.I have a rule on our ASA, source=dmz server, destination=domain server, service=domain which works fine and permits access to my domain controllers and access shared folders from a test DMZ server...and the bit that doesn't.Wha...