Helloo Friends, I have ASA 5520 firewall with latest asdm version 8.3. i want to block some sites like all social networking sites, chatting sites, porn sites, proxy sites, hacking sites...... and https:// site ...
Hello,Is it possible for 1 firewall to configure 2 internet access, say first isp will use int e0/0 - outside, e0/1 - inside and 2nd ISP will use e0/2 - outside2 and e 0/3 -inside2 ?thank you,Edwin
Hello!I want to protect my multihomed Server using ASA 5510.The server is acting like a buffer betwen two networks;buffering data from one network and pushing it to the other.The traffic from both server interfaces should route through a respective f...
Hi, I've just upgraded a Trend Micro CSC-SSM module on a ASA 5510 8.0(4) to 6.3.1172.2 version.I configured url filtering policies for user and group in my Windows 2003 Domain, I installed 2 Domain Controller Agent respectively on PDC and BDC servers...
Hi there!,I am trying to configure an ASA 5520 with 8.3 software and i have to configure a VPN IPSec site-to-site. Trying to capture the packets i see coming the ingress interface but not coming out. So the VPN is not coming up and NAT seems not to w...
I need give the network ip pool client vpn 10.70.253.0/24, and the network in inside is 10.70.255.0/24, when I connect VPN client from internet I can reach all network in the LAN but the segment 10.70.255.0 is imposible.How I can do a walkarround of...
what is the command i can use inasa 5510 and 5520 to stop icmp packet of my public ip to ruin attack of DOS after certain amount of time . lets say 5 minutes i want to stop icmp service of my public ip interface3ThanksRajat
I've got a ASA5510 with an inside, outside and dmz interfaces. I'm trying to ping from the dmz to the inside interface but I can't.. (nothing else is communicating from the DMZ to the inside either, but I figured this would be the easiest thing to te...
I have a ridiculous problem, this 8.3 version is throwing suprises one by one...I have 2 interfaces Corp (142.63.52.221 / 27) and Collab (10.137.136.240 / 24) with the same securrity level 100. No NAT.I want to access from Corp to RDPSvr (10.137.136...
I am doing ftp application inspection on a traffic that matches ACL ( permit statement) src dst host.This part works fine.However, I want to exclude group of hosts from being inspected by my own policy and I want them to use aglobal one. I am acc...
Hi,I was wondering if someone could help me determine the limitations of using a failover-only PIX in standalone mode. I was reading this page: http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/failover.html and in the Failover ...
We upgraded all our ASA's last weekend to 8.2.3. The IPS modules were left on the version of code they were using when the ASA's were on 8.0.4.32.Since the upgrade, I am seeing something on the IPS sensors that doesnt make sense. When looking at th...
Hello I have a problem with NAT,the original config works fine (two lines below)nat (inside) 1 10.149.0.0 255.0.0.0global (outside) 1 62.206.190.254Additional I want to NAT the inbound traffic for a customer from outside 172.16.X.X to 10.149.241.20-1...
