Network Security

Dear all Firewall gurus,I have a client who has a pair of Cisco 6509 with a Firewall module on each of the 6509s. They are considering setting up the firewall modules as HA. What's the easiest way to setup the configuration for the stateful failove...

Hello,I have a question about Static NAT. My client use a Linux Firewall for Connection partners using L2L (about 70). He bought two 5520 to replace the current Linux Firewall. I conducted a survey of access rules for migration of the firewall and I ...

HelloWe have numerous remote sites that use a Cisco ASA5505 to make a site to site VPN into our main 5520. Anyway we need to add wireless to this sites. Does anyone know if it is possible to add a wireless module to these devices or do newer ones com...

Is it possible to automatically save the config files of an ASA to a central server on the network? We have a unix machine with syslog and snmp running.Thx,Marc

I konw ASA5580 can use show command "show environment" get "FAN" and "Temperature" information.When ASA 5510 or 5520 have the same as ASA5580 can use "show environment".

Hi ciscoteam,could you please let me know how/what to check in show connection outputs, and the meaning of the processes which will be displayed in the show processes memory.This will really help me in troubleshooting the cpu/memory related problems ...

ip address outside 131.211.156.130 255.255.255.224ip address inside 192.168.7.1 255.255.255.0global (outside) 1 interfaceglobal (outside) 1 131.211.156.131nat (inside) 1 0.0.0.0 0.0.0.0 0 0static (inside,outside) 131.211.156.145 192.168.100.145 netma...

Hi,Does anyone know what "persistence rebalance strict" on the HTTP parameter on an ACE will do.I understand it load balances a tcp connection matching a layer 7 class map to different servers, as oppsosed to "persistence rebalance" load balances to ...

Hi,Head end - ASA 5510 8.0(4)28I am using IPSec VPN client v. 5.0.06.0110. The issue I am having is that clients would lose their VPN connection, because of some wireless issues at their home. They have laptops and use wireless to connect to VPN. Wir...

Dear Forum, we have an ASA 5510 with an IPS Module SSM20. When i penetrate the ASA with NMAP from the outside interface i can detect the OS of the servers in the DMZ.When i allow the ip address of my testing machine on the outside interface the IPS i...

Hi allthe scenario is ASA-- --R1(Public subnet 1)--- -------Switch---------------------ISP1ASA-- --R2(Public subnet 2)---What is the best way to achive the redundancy both the firewalls in active active mode connected to switc...

Hi,I have two locations and these two sites are connected with site-to-site vpn. One site has ASA firewall and other site is checkpoint ADSL. When the checkpoint side tries to reach a server in other side it can ping but the application cannot connec...

HI, I'm looking for a good config for a ASA5505 with DMZ, but basic license. no access from DMZ to inside.

ip address outside 131.211.156.130 255.255.255.224ip address inside 192.168.7.1 255.255.255.0global (outside) 1 interfaceglobal (outside) 1 131.211.156.131nat (inside) 1 0.0.0.0 0.0.0.0 0 0static (inside,outside) 131.211.156.145 192.168.100.145 netma...