Hican ASA supports WCCP between the interfaces INSIDE to DMZ?I i have proxy server in DMZ zone and i want to enable the WCCP on ASA will it work?If WCCP is not supported between interfaces then is there any work around to redirect the internet traffi...
Hi Is there any limit on nat capabolity on an ASA or is this dependent on ram/ cpu ?I ask as i have 18 nat pools and 18 Global outside addresses ( a subnet per pool going to a single outside address pat / nat ). Each PC connection can have 100 + conn...
Hello,I'm currently looking into purchasing a 5510 asa with the security plus for HA and vpn capabilities.My network flow as I'm envisioning it isInternet -> 5510 -> Switches -> servers.Will that work?I only need the 5510 to do vpn, and PAT(that is w...
Hello,I have to install a PIX firewall and I have a question. Our ISP has assigned us two ranges of IP's (each range from a different subnet, for example, 10.165.100.32/27 and 10.165.200.160/27). I will assign one IP from one of these two ranges to t...
All...Here's the scenario:There's a host on the internal network that has a reverse shell to the outside world, and the packets being sent back to the attacker are encrypted, over a standard web (TCP/80) port - which is allowed by Websense or URL fil...
Hi!I need your help to understand something about the stateful inspection.Say we have a source X (initiator) that wants to access a destination Y that is in the "inside" network of the ASA. The source X is accessing Y across a tunnel.We have an Cryp...
I have 3 campuses; each campus has a DNS server and firewall.Each firewall has 3 zones: inside (10.5.5.0), outside (171.49.34.0), DMZ (10.5.29.0)Campus 1: Is where the primary DNS server is. The other two campuses get their DNS replicated from this s...
Hello,My firewall in multiple mode.When i create asa login with privilage 0 its shown me all possibility of firewall in which i can configure. so plz tell me what the difference between login level.
We currently have 2 ASA 5510's in Active/Standby state. Our current issue is that the primary ASA is taking quite a hit with the numerous NAT'ting and ACL's that have been implemented over time. RAM use is high, but CPU is ok.I have given some though...
HelloI need some help about access list. I understand is being read from top to down butI would like to confirm if someone have a reference or knowledge on how to organizeaccess list w/ different protocols. what i meant is from top to down w/c protoc...
Hello I need some helpWe have a asa 5510 and have now 2 ISP, I need to setup that one of the ISP1 runs port 80 traffic and ISP2 all the other traffic.Right now all the traffic runs on one ISP. Can you help me.ASA Version 8.0(4)Thomas
Plan on using the Conversion tool to upgrade a clients 2 PIXes at 2 different remote sites. New to ASA's and reading the migration guide, posts, etc.; but are there any "gotcha's" i need to look out for. No Certs to export. DNS etc,etc.. All config...
I have RADIUS authentication to an external RADIUS server setup for my Cisco ASA.However I would like to differentiate between VPN login users and SSH, ASDM users etc.At present radius allows either type of users access to any service.But in reality ...
