Network Security

We have some ASA 5510. Because of the update to version 8.2 we upgraded our memory from 256 MB (original) to 512 with the memory upgrade kit from Cisco. Now the new version 8.3 requires again a memory upgrade of 1 GB.So the question is, what is the m...

Hi,we are in process of upgrading our ASAs to 8.3; multi-context mode is used and wondering is there any gotchas when upgrading multi-context mode to IOS ver 8.3?I know there are some changes how nat and ACL are configured in ver 8.3 but could not fi...

We host software for a customer and they just installed a managed mpls router. Management wanted a way to protect there servers in our datacenter so we put the asa inbeween there mpls router and there vlan in our datacenter. One of the requirements w...

We have multiple VPN tunnels to multiple ASAs. However, one we have OSPF running over the IPSec tunnel to the host ASA, and this remote site is the only ASA we're having problems pinging to or from the internal interface from across the tunnel. The h...

can you please help me figure out why I cannot telne,ssh or asm into an ASA 5505 using its private ip address? I do have a succesful remote access VPN.I can asdm in to asa from home using its public interface.  also my local pc has the same private i...

I am at a loss, I am trying to install the VPN client on a 2003 Enterprise x64 server and when I try any of the following installation clients I receive a 1721 error.Here is the list I went throughvpnclient-win-is-4.8.02.0010-k9vpnclient-win-msi-4.8....

can you please help me figure out why I cannot telnet, ssh or asmd into an asa 5505 using its private ip address? I do have a successful remote access vpn established. I am attaching the running config.I can definitely asdm into it via its public ip ...

helloI have several users that are using phones over asa phone proxy (ASA v8.2) and when they make calls from their phone to phones that are not on the proxy, two way audio is established. If a phone proxy user calls the phone of another phone proxy ...

Hi Guys,I have new ASA 5520 and configured all Internet traffic natting (PAT) to 10.97.20.1, and I have inside network 10.5.5.0 will go through mpls to another site - which I wanted to nat it as 10.97.5.0, but it always translate all inside address t...

HelloHow to allow guest vlan traffic for http procotol only and limit bandwidth usage, looking for best practise implementation.Blocking peer-to-peer appliction too.In short our ASA is placed asInternet-rtr______ASA________3560_____LANOn ASA we allow...

I am rolling out a two tiered firewall design, the diagrams attached should be self explanatory. I am in a disagreement with a co-worker regarding today's best practice for this scenario. I know we've all been raised to believe mesh topology is the m...