Network Security

Hi all,I have an ASA5505 with a PPPoE WAN connection. In the last days, I receive packets with a 1500bytes MTU size with the "don't fragment" bit set.The weird thing is, the PPPoE can handle only 1492bytes.Here the log:%ASA-6-602101: PMTU-D packet nu...

Hi, we have a web server behind the firewall running different services. On of the services is called admin, allowing certain users access to admin page of the server. We need to provide a sort of url filtering. eg. access to www.webserver.com/admin ...

Dear Sir,I have the following items1) 2 x ASA5520-K92) 10 SSL VPN licenseI want to set up a VPN cluster to provide at least 10 SSL VPN connections.Question:1. Do I need to setup HA before configuring VPN cluster?2. Will the solution support 10+2=12 c...

ASDM 6.2 has been released which *finally* supports configuring IPv6 interfaces and ACLs. Previous versions display a 'IPv6 configuration not supported' if you accessed ASDM with any IPv6 config present on the firewall.In the release notes, Cisco spe...

HelloI am planning OOB L3 real IP deployment and have few questions:1. After CAM decides to which vlan user will be redirected what protocol does it use to tell switch to set this vlan ? For this deployment i found only: http://www.cisco.com/en/US/do...

Hi Experts,I request your help in clarifying the scenario below in FWSM:I want to access my INSIDE interface (ip address 10.1.1.1) from a server located in OUTSIDE interface (ip address 218.248.17.116).I learned that it is not by default possible in ...

I have a VPN established using DES in my firewall ASA5505 outside interface. I manage this device by the outside interface. My source address and the IP address of my machine are not on the vpn domain. When I try to access the firewall using SSH, it'...

I have a asa5510 that we created a seperate DMZ for vendorss to have internet access when they are in the building.We have http, https, dns and isakmp allowed outbound on this DMZ.We have used it before with no problem, but one vendor came in and nee...

Its easy to configure L2L VPN between two ASAs.Is it possible to create a L2L VPN between a cisco ASA and an ISR Router?Whats the major difference between the two configurations?

I'm setting up a ASA5520 (version 8.2(1))and would like to enable Traceroute from the Inside to the Outside. Most articles tell you to use ICMP Inspection instead of ACL's for this. ICMP Inspection appears to only allow replies that are from the dest...

Hello,Is there any way to change the administrative distance on the reverse-route feature of VPN tunnels? When using reverse-route it installs it as static, which gives it an admin distance of 1 it seems, so makes it very hard to use that as a backup...

We just migrated to an ASA5550 and an internal contractor cannot finish ISAKMP negotiation back to her IPSec VPN server (it's a Nortel client). She does get her DNS and IP adddress, so I presume something is trying to connect back to her PC. We fixed...

Hi All, whenever I turn on debug in ASA to start troubleshooting, it shows lots of output from access-list and connection teardown, and I can't see my debug output. how can I turn off those message to see debug output instead? any suggestion would be...