Hi,I have a client with a requirement for 2 internal lan segments to be able to reach the outside(internet) some static NAT's will be setup to expose services in the DMZ( possibly on the inside aswell using cut-through proxy for temporary access at t...
We currently use a cut-through proxy-like feature on Juniper SSG firewalls for our guest wireless network that allows a seven day (168 hour) timeoout, which matches the DHCP lease time. This extended time is not a problem with the SSG since it maint...
I want to upgrade the IPS module on an ASA but i cannot seem to find the right model number in Cisco. It used to be under Security -> IPS -> IPS modules for ASA -> AIP-SSM but i can only see AIP-SSC.Where did AIP-SSM go?
Hi,I have upgraded my firewall OS from asa707-k8.bin to asa804-39-k8.bin after which the memory utilization has suddenly shoot to 90-95%.Have tried many options available to identify the cause such as disabling threat detection,shortening the access-...
Hi all,Something I have found a bit confusing and am not sure I am doing correctly with the new "network object" setup is this:Say I have several servers behind 1 public IP address and several publically accessable services running on the different s...
Hello!!I am going to implement a new ASA 5520 in a network with two ISP, but I have a question with the route because with one provider the user can access to internet but with the second services provider the user have the e-mails, so this is the to...
I just installed a new SR520-FE-K9 at a customer's business. I can't see anyway in CCA 2.1 to configure a pass through PPTP VPN to their Windows 2003 server, which acts as the VPN server. You can easily configure port forwarding for port 1723 to th...
Hi.Please I need help.I have my server with the "Active Directory SSO" started, but when a user try to connect to the network with his credentials that have in the Active Directory, the agent PC say that "Invalid username and password"My server is li...
Hello,Citrix server is in DMZ (off of ASA) and its pvt ip being translated to public IP for external user connectivity . Everything works from outside (ex: http/s:haccess.xyz.com, ping to haccess.xyz.com etc) . Now, the internal user residing behind ...
I configured a transparent firewall and found problems of not being able to ping devices reachable via the tunnel when forming a VPN connection from my laptop out to another firewall, while looking at the log view on the transparent firewall, I notic...
Below is Ethernet0/0 and it's subinterfaces. The physical Ethernet 0/0 is connected to a Gig port on a 2950T that is set to trunk.I'm not using the native vlan but is the ASA dropping the native vlan data from the switch since the physical interface ...
Hi Folks,I have an ASA 5510 (8.2.1) set up with IPSEC VPN clients and am having a strange issue getting two-way connectivity in place. High level configuration as follows:NetworksInternal_Network (user desktops, servers, etc; hangs off a 48-gbport L...
AT my wits end with the new 8.3. I've spent way too much time trying to get this simple simple thing to work. I have one IP on the outside interface, and when i try to access the web server in the config it doesn't allow it and the ASA shows its de...
