Network Security

ASA 5505 - Firewall Dashboard - Labelling Services

Hi Guys ....I have just taken over the management of a Cisco ASA 5505 : ASA version 8.0(3) / ASDM 6.0(3)In the Firewall Dashboard > Top Usage Status > Top 10 Services Tab - the previous manager has labelled some of the ports/protocols with namese.g. ...

ASA - 1 public IP supporting multiple HTTP inbound connections?

Hi There,We are running multiple test websites with host headers enabled on the servers. I want to know if the Cisco ASA 5510 can be configured to pass on the requests to these internal servers based on the domain name rather than the IP address and ...

Resolved! NAT inbound 2 IPs to 1 internal IP, possible?

I just wanted to double check before giving up. There is a server on the DMZ that only supports a single IP address. My client wants to translate 2 public IPs to this one IP on the DMZ. Is that possible?

upgrade ASA-SSM-10 via FTP

Hi all,I am trying to upgrade an ASA-SSM-10 running version 5.1 software.I have set up an FTP server using Serv-u and can connect to it successfully.When I attempt to upgrade using the following command, I get the error below.sensor(config)# upgrade ...

Problem with NAT on ASA5520

Hi everyone,I have 4 interfaces. 1 outside interface and 3 inside interfaces (DMZ20, LAN2, LAN3). I need permit traffic between all inside interfaces at least for the beginning - this works fine now, NAT for internet from all inside interfaces to out...

ASA - no logging msg 106100 for matching ACEs

Hello all,At monitoring, real-time log viewer, loggin level debugging, and syslog also, I can't see the message 106100, which each Acess List Entry should generate when there is a match. Some times are generated, but 99% most of the time aren't.I can...

Resolved! Rules needed for outbound PPTP connection?

I'm trying to connect out from behind my PIX-515 (v6.3.5) to a client's site using PPTP. They have a Win2K3 server running RRAS, using MSCHAPv2 authentication. Their firewall (an AT&T-provided router) simply has port 1723 forwarded to the RRAS serv...

Thinking of upgrading from a Netscreen NS100 and PIX515e to a ASA5510

Hello everyone. My current environment contains an ancient NS100 (Grey box not blue) doing firewall/NAT duties and a Cisco PIX 515e doing VPN duties. I've looked at the following UTM devices to replace my current setup: Cisco ASA5510 Juniper SRX240 ...

IDSM-2 re-image issue

Hi Netpros,I am getting this error when I trying to re-image the IDSM-2 in maintenance partition. Actually I dont know the password for the administrator account and re-image was only option according to documentation. This is the step i am following...

Is using the Object-Group will reduce the processing effort ?

Is using the Object-Group will reduce the processing effort ?and is there any documents for ACL design consedieriation ?Thanks a lot in advance.

ASA - overlapping IP ranges on outside and dmz interfaces

Hello,Cisco ASA question, if I can carve small range of global IP addresses from big IP range that exists on outside and put this small range to dmz interface?.The task is to have a few servers assigned global IP but have them behind a firewall so we...

static NAT and NAT 0 in cisco PIX and ASA

Hi,I have a question about NAT in cisco Firewalls (PIX and ASA).I have the inside, outside, DMZ1 and DMZ2 zones, I dont want to enable NAT between these zones. I find that the use of static NAT is more difficult then the NAT 0 ( it needs more configu...

How to monitor connections dropped and rejected on the PIX/ASA firewall?

I need to monitor by SNMP the connections dropped and rejected on the PIX and ASA firewall. Is it possible?

Cisco 6500 series Virtual Firewall

Dear all firewall gurus,It's my first time to use 6500 series Virtual Firewall for my clients. Does anyone have any sample config that I can use as reference?? I have a pair of 6509 running VRRP and needs to have virtual firewall on top.Would apprec...