Hello there,Can someone assist me to know if it is possible to configure more than one domain eg. XX.COM and YY.COM for NAC ADSSO and how to do it.regards,Stanslaus.
We want to buy a firewall, our requirement is we have an online web application that our clients will access through Internet, these users will not exceed to more than 3,000 in coming 5 years, we are also expecting few site to site VPNs not more than...
Im fairly new to IPS. I inherated a system that has two ASA's in a active/passive configuration. We also have an IDS module in each ASA. Ive been doing a little maintenance work on them lately and realized that they dont sync. I was under the impr...
I know I'm not alone in my distaste for the way that NAT configuration has changed in 8.3. And this doesn't come from a fear of change, as is so often the case with complaints like mine. It comes from the fact that now there is FAR more lines neede...
Hello,I have a lot of AnyConnect users on my ASA 5520, and the licensing cost is pretty hefty for an additional 500 users. I found out that the 8.3 version of the ASA has a special license that lets you have pretty much unlimited AnyConnect users. It...
Hello folks -Here is an image describing my network topology. As indicated, we have two different ISP's for two different services we provide. Our customers have access to Database servers as well as FTP servers sitting in the DMZ. Customers are conn...
I'm using an ASA 5510 with 8.2(1) and want to know if something is possible.Assume the following scenario:I have two private subnets: 10.10.1.0/24 and 10.10.2.0/24.I have one public subnet: 172.168.1.0/24 (not really public, I know, but this just an ...
I followed the Configuration Example below to configure MPF FTP inspection with regular expressions.http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080aee442.shtmlI recently had a user complain that they were unable to...
Greeting allI`m facing an issue where traffic redirection from inside to inside is not workingI have an ASA connected to SW and used as my default gateway (inside interface)When traffic coming in the inside interface i can`t routed back to the inside...
Hi All,I have observed Zero Windows Probe events and its default action says "Modify Packet" . Please let me know what will be exact action taken by IPS as i need to thoroughly understand it. Please guide me.RegardsKiran
Is anyone else seeing a lot of alerts firing from legit sites for sig 31359/1? I'm receiving them from Yahoo and Akamai as well as a few other sites.Cory
As you know the ASA has a port explicitly defined as the managment interfaceyou aslo must explicltly define ssh/telnet/http access using the ssh xxxx.xxx.xxxx.xxxx "interface"My question is..what is the purpose of the "management-access (interface)" ...
Good Day experts,As part of our year-start checks, we have to conduct intra chasis switchover test for firewall modules. active & standby are on single 6506.We are lost how active & standby fail function part can be tested on same switch platform.Ple...
