Network Security

Hi All,Wondering if someone can post an example of dynamic destination nat?Basically I want my source - 10.104.34.0/24, dst - 10.100.55.0/24 to translate the dst - 172.21.0.0/16.Is that possible?Thanks for the help.

Hi,I've received my ASA5510 and i'm trying to allow Ping through the Firewall between DMZ-LAN and LAN-DMZI use:access-list "ICMP_LAN" permit icmp,echo,echoreply  any anyaccess-list "ICMP_DMZ" permit icmp,echo,echoreply  any anyI applied the access-li...

Hi,This one has been puzzling me a bit.We have been having continuous MTU issue with suring certain website. Our MTU is set to 1454 on a PPoE connection (which works with a laptop directly connected) and when I try to browse certain website (like www...

Hi,Several months ago we upgraded our ASA firewalls to v8.2(1) and along with it the ASDM to v6.2(1).Since then we have had nothing but problems with the GUI. It regularly freezes and crashes, and its general responsiveness is sluggish to say the lea...

I have a basic 1841 with a 2MFT-T1-D1.I got a request for a VPN and an IDS.I bought an ASA 5510 and a IDS-4250.in the documentation for the IDS 4250 i dont see a mention of the 1800 line, just older 2600 3600 plaforms.before i spend time + buy extra ...

I have an ASA5510, v8.3.2, with EIGRP routing enabled. The inside interface IP is 172.19.3.33/27.  The outside interface is 164.72.232.27/29 connected to a switch that has a Cisco 2821 IOS router with EIGRP running. The 2821 interface is 164.72.232.2...

I have an ASA running software version asa804-k8.bin and using ASDM version asdm-615.bin, for some reason I can no longer access the device via ASDM.I have tried uploading another copy of the ASDM image and a newer version asdm-61551.bin, and still t...

Hi,Please could somone help me with a NAT issue. What I would like to do is NAT a device which sits within the F5_LTM interface (10.224.192.0/20).I need to NAT the source address of 10.224.200.8 to 10.224.192.12 when it hits the inside interface.I ma...

Hello,maybe the title is not very clear, but I'll try to describe my problem here.Currently we have a PIX 515e as our entry point. Our ISP give us an ethernet link that we plug in the Ethernet 0 port. In the Ethernet 1 port we plug a cable to our swi...

Hi ,ERROR: ACE contains port, protocol, or deny. Removing NAT configurationI get this error when i put the tcp ace entry in the no nat ACL, my ASA is 5580 8.2.3and this removed the no nat entry from the firewall. any ideas what could be the issue.Reg...

I installed the IME and started to add our current IPS devices to it. However when I look at the dasboard tab I only see the first device on my list. How do I see the dashboard on the other devices that I added?

I have a PIX 515e running 8.0.(4) and I am having problems getting the an ACL on the outside interface to work. This is not in ptoduction, so at this point I just want to see if  can get traffic to come in.access-list OUTSIDE extended permit icmp any...

I am suspecting the connections entry based on the “sh conn” output.We tested this by establishing a telnet connection to 3389 from the below IP & observed the below connections. If we close the telnet, all the below getting closed simultaneously.Thi...