Network Security

In my old PIX I had this;PIX515e# show natnat (inside) 0 access-list inside_outbound_nat0_aclnat (inside) 1 0.0.0.0 0.0.0.0 0 0nat (DMZ) 0 access-list DMZ_outbound_nat0_aclWe have the don't nat 0 with access-list, how do I re-impement this with ASA 8...

%ASA-session-6-302021: Teardown ICMP connection for faddr 192.168.1.109/0 gaddr 192.168.1.4/0 laddr 192.168.1.4/0 I have upgraded my ASA from 8.0 to 8.2.However, none of static NAT working. All outside_access_in access-list has no HIT. Please help.

We've setup VPN client with DMZ on the same 5520 and the VPN client(we use any connect) cannot access resources on the DMZ.  They can access the local lan fine.  I've tried different ways but still no go.  Please help.  Thank you.Here's my partial co...

We have an office in Asia which is connected to our New York location using l2l IPSec through the internet. They claim that they have guaranteed bandwidth of 2MB with their local ISP. They are using MRTG apllication to monitor the bandwith and it is ...

Hi,I have a clean access server configured as OOB real IP gateway.The clients are placed in authentication VLANs on the edge of the LAN that are a couple of L3 hops from the CAS.We have policy based routing configured to pass client traffic from the ...

Hi All,we have ordered certificate from CA (Entrust) for both CAM and CAS. when I import certificate to the CAS, communication between CAM and CAS is broken. do I need to import CAS certificate to CAM in order to trust CAS?any suggestion would be ver...

Hello,I have on my Cisco asa 5510 the URL filtering running with regex. The problem that i have now is that i want to allow part of a domain.For example i want to block cnn.com but i want to allow people to access cnn.com/AFRICA/I was looking on the ...

Hello,Can someone from the TAC check this tracebackThread Name: Dispatch UnitTraceback:0: 0805d0d31: 0805db772: 08a23d7c3: dd7a86d54: dd58d1e05: 0824915e6: 082496507: 086f57538: 086f58659: 086e4c2910: 08bee28611: 08bee7c212: 08beec8a13: 086e29d314: 0...

hi,i'm a little lost with interpreting the following debug messages of an ASA 5505 running "asa724-k8.bin".I'm loosing the connection every so often after 20-45 Minutes:%ASA-3-403503:PPPoE:PPP link down:%ASA-3-403503:PPPoE:PPP link down:Peer Terminat...

Hi all,Is there any cisco or non cisco tool that i can use to monitor cpu and memory usage of pix and asa firewall? This tool need to be able to generate reports eg on a daily/weekly/monthly basis. Pls advise. Thks in advance.

HelloI wonder is a traffic flow like this even possible interface inside -> outside -> dmz -> outside -> insideThe case is like this: We have a guest network that only can access the internet and we got a few servers on a dmz network (inside the fire...

Hione of our machine behind asa5520 have strange behalve. the log is:Deny TCP (no connection) from 10.10.10.5/39708 to 10.10.5.5/22 flags RST on interface insidemy configure is:object-group network mytest  network-object 10.0.0.0 255.0.0access-list o...