Hi,I am having some difficulty with configuring a PIX 501. I am very new to Cisco equipment and am sure that I am missing something very basic.I have configured the device to the best of my abilities but it is still not working. The PIX is sitting be...
i have amazing problem. i tryed to nat one of my private ip address to one of my public ip address in fwsm. it worked fine. for example, nat 192.168.1.1 to 217.218.100.2. my 6500 switch is connected via one 3560 switch to internet and all of my LAN d...
Hi All, I have two ASA's configured on Active/ Standby failover mode. I am observing frequent failover (once or twice in a day) of ASA post IPS installation. The below logs were captured when the issue was observed %ASA-1-104001: (Secondary) Switchin...
Questions: Does anyone know if "sla monitor" can log its state changes? If not now, is it planned in a future release?Background: Since version 7.2(1), the ASA firewall has a "sla monitor" feature to monitor the availability of remote IP addresse...
I am going to crazy,Last firday, we set up the new PIX 501 as the firewall. And connect the switch on it. At first time, most of the machine which connect to the switch can't get internet and the NAT map IP also not work. Our ISP let us wait for few ...
Hi,Having serious trouble getting my DMZ zone to work as planned.The setup is typical, having WAN interface, and a internal interface with a few vlans on it - besides that I now configured a new VLAN on a vacant interface eth0/3 which I am planning t...
hi all,we are facing a certificate error problem on the in-band mode NAC. While user tries to communicate with ms outlook via in-band nac after the NAC process, user get the certificate error message from the proxy server, but when user clicks the vi...
Hi All,Can someone explain me what is the use of command nat-control and no nat-controm on ASA. As I am newbie to ASA.I tried to search a lot on internet but I didn't simple and explainative answerPlease can anyone help me outThanks
I have a deployment of NAC Solution where CAM located @ HQ, Users at HQ has a dedicated CAS, while other sites has a seperate CAS/NAC Modular located at thier sitesthe deployment is L3 OOB, in case the CAS at Remote site has failed, is there a way ...
Hi all,I'm experiencing trouble with a PIX501 config. I hope someone is willing to help me on this, since I dont' have too much experience with Cisco-firewalls. I have an ASA5510 (configured by a specialist, I only add/remove/alter IP's) and I tried ...
I just upgraded to an ASA5520. More or less everything has been going well. I have a user in a SOHO with a small home network. On his laptop once he enables his VPN he can not access his laptops printer or RDP into it. I have split tunneling ena...
Can someone take a look at my asa config?I'm trying to get my IDS box to talk to my syslog server through the asaIDS box is off the DMZ interface with IP 10.231.30.254 - it initiates a connection to my syslog server off MPLS interface with ip 10.24.0...
ASA 5520ver 8.2.2I read that can use a virtual ip range to do static nats between inside and outside networkCan someone assist with a short config on how this is done?inside: 192.168.195.201 /29outside: 10.25.41.1 /27virtual ip range: 192.168.191.1...
