Network Security

most of my interface specific ACLs are the same - with only the last few lines be different from interface to interface.  however, i still have to create a mostly duplicate ACL for each interface.i know there is the global access rule which is applie...

Hi,I'm new here and am having a doubt.I configured the NAC to do SSO with Microsoft AD. The user make login into the domain and the NAC Agent finds your credentials without problems.When we make login on the local computer, the NAC agent requests cre...

I am trying to configure my QoS policies on both ASA 5505 and 5510. I havent moved passed the first ASA yet which is a 5505. Below is the show ver and the copy of the config I am using.Topology - Each ASA has multiple site to site vpns coming into it...

I'm not very versed in using this ASA 5505.  My former "IT Guy" set it up for me a long time ago.  I've been able to fumble my way around in the ASDM a few times to make changes to static IP, etc.But now I'm at a point I absolutely don't know what to...

Does 8.3.2 recognize and work in VRF-lite environments?  We're desiging a PCI network segmentation strategy where we use VRF-lite point-to-point (non-mpls) in to segment out PCI traffic from normal traffic. The ASA firewall is the device that sits be...

Anyone know the syntax for specifying a network rather than a host for any one of the above DHCP options on a Cisco ASA? I need to specify a specific network route and with any of these options it is only providing a host route. Is this a limation of...

Hello Dears,I m able to get IP address and domain name from ASA firewall group policy configs through Windows VPN Client  after connecting i m not able to do anything in my corporate network when i do remote desktop to my server i m not able to conne...

Hello Security Expert Team,I am using the Cisco ASA 5510/ver 8.2(1) and I am doing some the basic deep inspection for FTP traffic config:begin:!regex REG_C26XX "^c26.*"regex REG_C28XX "^c28.*"!class-map FTP match port tcp eq ftp!class-map type regex ...

Hi everybody,We've recently adquired an ASA 5505 with a base license, but we realised that we needed trunking and we upgradeded to Secury Plus (ASA5510-SEC-BUN-K9) by adquiring a ASA5505-SEC-PL. Now we have trunking but other trouble has appeared.Con...

I am in the process of upgrading all of our sensors to the 7.x code so that we can benefit from senderbase/global threat correlation.  I have been going over the syslog document and dont see anything that I can use to alert me as to when Global Threa...

Hello,Has anyone got v8.3 up and running on a 5500 ASA ?My old nat commands are no longer supported and I'm not certain of the best format for the new ones.I've studied the migration guide but just want to confirm my thoughts.My nat commands are belo...