Network Security

Hi Is there any limit on nat capabolity on an ASA or is this dependent on ram/ cpu ?I ask as i have 18 nat pools and 18 Global outside addresses ( a subnet per pool going to a single outside address pat / nat ). Each PC connection can have 100 + conn...

All...Here's the scenario:There's a host on the internal network that has a reverse shell to the outside world, and the packets being sent back to the attacker are encrypted, over a standard web (TCP/80) port - which is allowed by Websense or URL fil...

Hi!I need your help to understand something about the stateful inspection.Say we have a source X (initiator) that wants to access a destination Y that is in the "inside"  network of the ASA. The source X is accessing Y across a tunnel.We have an Cryp...

I have 3 campuses; each campus has a DNS server and firewall.Each firewall has 3 zones: inside (10.5.5.0), outside (171.49.34.0), DMZ (10.5.29.0)Campus 1: Is where the primary DNS server is. The other two campuses get their DNS replicated from this s...

Hello,My firewall in multiple mode.When i create asa login with privilage 0 its shown me all possibility of firewall in which i can configure. so plz tell me what the difference between login level.

Hi everyone,I need to limit the number of packets per second on a well known port. Is that possible using ASA 5505 without IPS? and How?Regards,Omar

We currently have 2 ASA 5510's in Active/Standby state. Our current issue is that the primary ASA is taking quite a hit with the numerous NAT'ting and ACL's that have been implemented over time. RAM use is high, but CPU is ok.I have given some though...

HelloI need some help about access list. I understand is being read from top to down butI would like to confirm if someone have a reference or knowledge on how to organizeaccess list w/ different protocols. what i meant is from top to down w/c protoc...

Hello I need some helpWe have a asa 5510 and have now 2 ISP, I need to setup that one of the ISP1 runs port 80 traffic and ISP2 all the other traffic.Right now all the traffic runs on one ISP. Can you help me.ASA Version 8.0(4)Thomas

Plan on using the Conversion tool to upgrade a clients 2 PIXes at 2 different remote sites. New to ASA's and reading the migration guide, posts, etc.; but are there any "gotcha's" i need to look out for.  No Certs to export.  DNS etc,etc.. All config...

I have RADIUS authentication to an external RADIUS server setup for my Cisco ASA.However I would like to differentiate between VPN login users and SSH, ASDM users etc.At present radius allows either type of users access to any service.But in reality ...

We have the IPS module on the ASA, we connected each module to the internal core switch and using the ASDM attempted to give it an IP address and begin the configuration.  However when defining the IP address (along with the username\pw) I get an err...

I am using an ASA 5510 for IPSec and SSL VPN access.   I want the VPN users to use RADIUS and use TACACS+ for management via ssh, telnet or https.  How can I configure that?  I tried to get TACACS+ working via the management port but was unsuccessful...