Network Security

We currently have 2 ASA 5510's in Active/Standby state. Our current issue is that the primary ASA is taking quite a hit with the numerous NAT'ting and ACL's that have been implemented over time. RAM use is high, but CPU is ok.I have given some though...

HelloI need some help about access list. I understand is being read from top to down butI would like to confirm if someone have a reference or knowledge on how to organizeaccess list w/ different protocols. what i meant is from top to down w/c protoc...

Hello I need some helpWe have a asa 5510 and have now 2 ISP, I need to setup that one of the ISP1 runs port 80 traffic and ISP2 all the other traffic.Right now all the traffic runs on one ISP. Can you help me.ASA Version 8.0(4)Thomas

Plan on using the Conversion tool to upgrade a clients 2 PIXes at 2 different remote sites. New to ASA's and reading the migration guide, posts, etc.; but are there any "gotcha's" i need to look out for.  No Certs to export.  DNS etc,etc.. All config...

I have RADIUS authentication to an external RADIUS server setup for my Cisco ASA.However I would like to differentiate between VPN login users and SSH, ASDM users etc.At present radius allows either type of users access to any service.But in reality ...

We have the IPS module on the ASA, we connected each module to the internal core switch and using the ASDM attempted to give it an IP address and begin the configuration.  However when defining the IP address (along with the username\pw) I get an err...

I am using an ASA 5510 for IPSec and SSL VPN access.   I want the VPN users to use RADIUS and use TACACS+ for management via ssh, telnet or https.  How can I configure that?  I tried to get TACACS+ working via the management port but was unsuccessful...

Hello, i having problem with VPN connection from a windows PC using L2TP/IPsec, i alow all necesary protocols (GRE, ESP, PPTP, UDP-500, UDP-4500 and UDP-1701) on outside interface on PIX (version 8.0(4)), i'm perfectly connect with PPTP but when i tr...

Wondering if any security/firewall guru's out there can shed some light on this.  I have an ASA5505 that's acting as my default gateway for all the machines in my network.  I have one unmanaged gig switch behind it that has a couple machines connecte...

i, on the ASA 5505 is impossible configure on the static PAT more ports but also is impossible to use Service Groups.I have this situation:- internal mail server that use pop3 and smtp port, the IP Address is 192.168.1.80- two public IP address, one ...

Hi Guys, we are installing a new web server in our environment. Current web server is on Windows 2003 x64 R2 with IIS6.0 . The default www page is abled to view internally but not externally.We used ASDM to configure the NAT and open ports 21,80,8080...