I've tried it all. no inspect esmtp. no policy map. inspect esmtp tls with banner obfuscate off. i'm out of ideas. i always get 220 ******** when telnetting to mail server from outside. tried 8.2.1.11 and 8.0.5. any ideas?exchange 2010cable mod...
I have an ASA 5510 it connects to a 2950 switch. I am trying to hard-code the speed and duplex on the ASA interface to 100 speed and full duplex but when I do, the ASA disconnects from the network.I have the switchport port to 100/full hard-coded. So...
Hi All,I have a simple question regarding the ASA.I need to block apps.facebook.com/onthefarm for all users in the company.I don't want to block facebook, but just this site.I realize I cannot do this with ACLs, but I've tried to implement Regular Ex...
We are planning to upgrade the RAM from 256 to 512 MB each on our two ASA's 5510 which are in active/standby mode. I was wondering if anyone has done this and how can this be done with minimum or no downtime.My thoughts were to shut the standby and r...
Got a scenario where when a I divert Http Traffic to CSC-SSM, Invalid URL errorIs encountered. Attached is the network diagram. Users from branch network gets theirInternet connection via the squid proxy of the main branch. The main branch is connec...
Dear AllWe have 2 cisco asa 5510 in active passive mode . When i check the failover it shows that both one asa is in active mode and the other is in passive mode.I am able to login to the primary firewall but not able to login to secondary . The sec...
I'm using the following script to pull out the source port from a syslog message generated by an ACL. The intent is to grab the destination port for use later in the script:no event manager applet REDIRECTevent manager applet REDIRECTevent syslog pa...
I was able to built tunnel between L2L fallowing this example:"Add a New Tunnel or Remote Access to an Existing L2L VPN"I've tried to add other tunnel to the NY (HQ) Firewall. Is it possible to add more tunnel ?My configuration is TN, NY, and CA tunn...
I am installing a NAC solution for a customer and they don't want users to have the NAC agent in the sytem tray. Is there any way to do this because they are pretty adamant about it.
I’m going to configure (on paper) an FWSM with two contexts sharing inside and outside interfaces.I’m using one context only for admin purpose (access to the system space) and other to pass traffic.Admin and production contexts are sharing the inside...
does anybody have any hard & fast rules or 'rule of thumb' type guidlines for how big the state links have to be with an ASA 5580 running multiple contexts ? For example as you add more contexts, you are of course firewalling more traffic --how doe...
Early today while working at a client site, I had to troubleshoot a Cisco VPN clientconnection against our ASA appliance. I SSH'd to the ASA, then went to work setting up the following:debug crypto isadebug crypto ipsecdebug crypto engineI then woul...
I have this problem with slow performance one way copying files from one server to another.Iperf also shows this performance.Server1 is connected to a 3560 giga-port in vlan 670, and there is a 1 gig trunk to a 6509.The 6509 is configured with vrf an...
