Network Security

Below is a on going chat i am having with a PIX expert... Can anyone see where the problem is when you read the message below???Cisco ASA 5510 configuration for host inside private networkQuestion: We have a Citrix host behind a new 5510 that needs t...

I am remotely managing an ASA 5505 using ASDM.  I need help correcting a nat rule.  I need to allow external access from 1.1.1.1 TCP 1433 to inside 192.168.3.6.  I have an access rule source=1.1.1.1 dest=outside service=tcp 1433.  I have a nat rule o...

I've got a lab and am trying to figure out how to make NAT work for some future projects (remote offices with overlapping networks, L2L VPN with overlapping networks, etc).  Using this as a guide https://supportforums.cisco.com/docs/DOC-13429 I was a...

Hi,I have ASA 5520 running ver 8.3.(2)8 and configured for AnyConnect VPN. While testing for iPads and iPhones we noticed that on connecting it disconnects few times before finally connecting. These are the messages logged in the ASA.I don't see auth...

Hello Folkswhen i issue the command the sh aaa-server MYACS,I Noted the below msg for server status,how to troubleshoot and fix this issue?Server Group:    MYACSServer Protocol: radiusServer Address:  192.168.100.100Server port:     1645(authenticati...

Dear all,This is regarding the telnet issue to ASA.Currently I am able to telnet from inside network to ASA with folowing configuration..telnet 10.0.2.0 255.255.255.0 insideNow I want telnet from outside interface but unable to access..telnet 10.0.5....

IOS 12.4(24)T22821#sho ip nat nvi translations | inc 5190tcp x.x.x.x:1082  10.96.33.31:1082   64.12.28.238:5190  64.12.28.238:51902821#clear ip nat nvi translation tcp inside x.x.x.x 1082 10.96.33.31 1082 outside 64.12.28.238 5190  64.12.28.238 5190%...

When will (or is it already?) NAC be officially supported running as a VM?4.8.1 installs just fine and appears to run well (I was using an eval license) on vSphere 4.1.-Mike

can some one help me with the follwingi have ASA5510-CSC10-K9 , does this product has failover license .??i have seen ASA 5510 SEC + bundle do have failover license . but if i order for ASA5510-CSC10-K9  do i have to ask for failover license sepratel...

Hello,I know very little about ASAs and FWSMs and work in an environment where we have both. Lately, I've been asked to get more involved in maintaining the firewalls, but no one will help me understand the basics. I've done some searching around and...

After running the FSCK command on the FWSM Disk: I have orphaned files remaining but am now unable to delete them?On running the FSCK command it did ask for confirmation not to delete these files which was default, but as not knowing what this would ...

HiCan anybody help me with a question I have regarding port redirection? Can we port forward two private IPs to the same public IP ?I have the following statementsstatic (inside,outside) tcp 1.1.1.1 https 192.168.15.112 https netmask 255.255.255.255 ...

Hi,is it correct that the cisco asa can't be a mld querier?I've enabled mld snooping on my backbone but without a querier in each vlan it makes no sense Any chance to get better mld support in the next firmware release?

We are using an ASA 5510 as our gateway to our ISP.  All of our VOIP traffic is sent to an Internet SIP provider for our outbound calls.  Our pipe to the Internet is 100Mbps metro ethernet.  I am trying to find a way to provide QoS for this traffic s...