Network Security

we have a ASA5500 with 3 interfaces : outside, dmz, insidewe have a number of static nats translating a given public IP to a dmz servers and that all works fine.  However for testing purposes, we need to be able to access the public IP from the insid...

We have a new ASA and I am wondering if it can be used to block access to services such as Log Me In or Goto MY PC? I did not know if this is a simple matter of blocking a range of IP addresses or specific ports or something more complicated that we ...

Hi All,I have a ASA5510 with CSC SSM 20 module. I have configured the SSM module to spam the incoming and outgoing mails in both SMTP and POP3. Now it is spaming the incoming POP3 mails but it is not spaming the outgoing mails in the smtp. please sug...

Just wondering if I am the only idiot out there who took a look at the 8.3 NAT changes and thinks these changes are not really necessary, make the config much too big and in general cause too much confusion. In addition, the 8.3 NAT configuration loo...

Hi,We hope to enable network access authentication on my ASA firewall to allow user access to Internet after authentication. Can ASA provide either the network access log with user information or user-IP mapping information?Best Regards,Jackson    

HI all...I have a problems with packets with same source and destination port. Problems are unidentified, somethimes there is connection between 2 hosts and somethimes there aren't, I really can not describe better. Before I continue with my detailed...

Hi guys,I'm at a customers site doing some unrelated work and noticed that they have an ASA 5520 used solely for VPN connections. In this they have a CSC SSM module to, I assume, stop remote users with infected computers. He had set it up using the C...

I am using external radius auth and aaa rules for users to access https site. Everything is working ok for first access. Users tries to open url, asa send login screen, user fills it with credentials, radius say ok, asa let user access site. But .......

I have DMZ interface with 192.168.1.0\24with the following config on the firewall:nat (dmz) 2 192.168.1.0 255.255.255.0global (outside) 2 <publicIP>the dmz interface on the firewall is 192.168.1.1 and it can ping all dmz servers, so routing is not th...

Hi all,My gateway is asa 5510 version 7.2(4) with ip 192.168.10.254. In my network there is a router 192.168.10.253 which is connected to other networks 192.168.2.0 and 192.168.3.0. There is a static route configured on my asa to direct traffic bound...