Network Security

Hi,have an ASA 5505 with version 8.3 ..... create a remote vpn tunnel but i can`t connect from the client. Don`t know why. Here is the config:ASA Version 8.3(1)!hostname ASAnames!interface Vlan1nameif insidesecurity-level 100ip address 172.16.23.5 25...

Hi all,I am trying to set a new context and want to allow ainternet ccess to users through  new context...Topology:========Internetrouter<==== FWSM (Admin, context1, context 2)<=====LANinternet router inside and outside ip is public ip...FWSM(outside...

Dear Friends,I am having a peculiar problem here. I have a ASA 5520 with VPN plus license. whenever i give a command like# nat (inside) 0 access-list no-nat#nat (dmz3) 0 access-list no-nat1and thenaccess-list no-nat1 permit esp 172.24.67.16 255.255.2...

Hi All,A client ordered a new ASA5520 ,but urgently needed a firewall inplace so loaned the client one of my older 5520's running 6.22, thinking that once their equipment is delivered I will downgrade the software on the new device install the runnin...

Hey folks,I'm working on a FWSM code v3.2(2) in multiple context mode.I have a context that has several hosts within a VLAN terminated in this context.I can ping into and out from these hosts.  However, I am unable to ping into the firewall and get a...

I have 2 ASA5510's, identical configs. I was having speed issues with one, so I unplugged it and plugged the second one in. The second one is much faster than the first one. Both are connecting at 100 MBps Full duplex, and the configs are identical. ...

Hi everybodyI am using the interface ACL in outside interface to L2L VPNs and now I am using vpn-filter in group-policy to Remote Access VPN.When we are using that two ACLs, how is packet verified?ASA first lookup on ACL interface and after Vpn-filte...

Our web site is hosted on our internal network (not on a DMZ).  Attempting to contact it from the INSIDE network, through our ASA5510 at its DNS-acquired public internet address fails.  Access to this site from OUTSIDE works.  Both "same-security-tra...

Our ASA5510 is dual-homed and directly connected to provider-controlled routers.  The primary ISP is 10 Mb fiber and the backup is a T3.  We've configured the outbound failover with SLA and that works fine.  What I'd like to know is how to ensure tha...

Hi,Something so simple seem to be difficult to find online anywhere.  We configured IPS on a Cisco ISR 871 and applied it inbound for our WAN and LAN interfaces.Question is this ... is there a quick IPS test I can do to confirm that the IPS working?S...