Hi Pros, I have a problem with traffic in two DMZs. Let's call them DMZ10 and DMZ20. DMZ10 has a security level of 40 and dmz20 has a security level of 90. By default, the higher sec level is able to access, the lower sec level, but if ...
Hi,I am using an 1801 for test purposes. The router is setup to nat a 192.168.x.y/24 network. Connectivity/browsing/NAT/VPN/Portforwarding all work fine. The router has a single static IP.I have opened open port 21 to forward to forward to my 192.168...
Hi Forum People, greeting. I have an ASA 5510 with SSM CSC, i only using inside interface connect to LAN, outside interface connect to Border Router. My motive is would like to block user from inside interface using Bit Torrent related application ...
In tuning my signatures for products we do not have, such as HP Openview; what is the best practice, or what offers the best performance- leaving them in the default state, or disabling them?
We have recently had to add another ISP connection to our ASA 5510 to acquire more static IP addresses. We have purchased a new server and needed a new static IP address for it and so the ISP ran another drop into us to provide these additional stat...
I'm trying to get a better handle on these. We use a third party hosted app that the users connect to using and encrypted ssl connection. The users view and approve many 2-3 page pdf files via this app. They frequently comment that performance is b...
Hello Frdz ...I have NTP server in DMZ zone and all Inside hosts would get syn with DMZ zone NTP server ..I have been getting huge No matching connection for ICMP error message between inside host and DMZ NTP server ....Could you please suggest how t...
We have ASA5505 running 7.2 and will be replacing the unit with ASA5510 shipped with 8.3 - better performance.Do we save the running config in the current asdm 5.2 and then import the config somehow in asdm 6.2?Or is it easier to cut and paste into t...
I just received my replacment ASA5550 firewalls from Cisco and they onlt have an IOS loaded on DISK0: (723-K8.bin)I want to load the latest IOS (8.22-K8) and ASDM (asdm-631.bin) on DISK0:I configured the port GI0/2 with an IP (192.168.4.1)I am usin...
according to documenatation, show mac-address-table should be valid EXEC mode command.what am I doing wrong?isdevfw00# show ver | inc Version Cisco Adaptive Security Appliance Software Version 8.2(2) Device Manager Version 6.3(1)isdevfw00# show mac?E...
I'm trying to understand the risk rating calculation on an IPS4240 sensor. From what I can tell, it looks like there are some additional parameters added to the equation that are not easy to determine. It looks like the ARR (Attack Relevancy Rating...
Hello,I have a task of replacing PIX515E ver 6.2(2) to ASA 5505. I have read that I need to upgrade PIX to ver 7.0 before I can just use tftp and move the config to ASA. However, if I dont have an option to upgrade what is the best way to go about it...
Hi,I am trying to get cut through proxy to authenticate SSH connectivity. If I use telnet, the firewall will proxy correctly and force local AAA authentication however, when using SSH, the connection is dropped with error :processing uauth_error, ses...
We have an ASA 5505 configured to an integrated T1 that also provide VoIP through Unity Express. The firewall also hosts a L2L vpn with a second site. The problem is that when users download files from the second site, the T1 inbound becomes fully ...
