Network Security

Hi, ASA 5520 with access-list on INSIDE Interface. There is trading application need by a user on LAN where ports are unknown and needs to be opened.How to identify the ports. On ACL inside if I add permit any any it works.All http traffic is not pas...

HelloI've upgraded my ASA 5510 to Version 8, and also the ASDM to 621. When I try to access via HTTPS I get "401 Unauthorized". The config looks fine, so I'm presuming it could be because IE7 possible. Any help would be great.Thanks

Hi I have received an log on my cisco vpn 3000 concentrator stating....L Internet Key Exchange (IKE) Phase-1 Denial of Service *Delinquent 2009-09-09 2009-10-09 now what do i need to do to gather more information pertaining to this DOS attack and how...

Can an ASA 5510 load balance over two ISPs (i.e. send and receive traffic over two different connections simultaneously)?I know the unit has Dual-ISP support so if one ISP fails it can re-route the traffic through the other ISP but can it utilise bot...

When running two ASAs as Active/Standby; is there a way to have two different management addresses using two different networks?(In a failure each ASA should keep its mgmt address. Basically exclude the mgmt interface from config synchronization.)Th...

Hello I have an ASA5510 which I am trying to move into production. Currently I have external, internal, and DMZ interfaces. I have a proxy setup for the inside traffic to get out. I also have a static nat for a DNS server in the DMZ zone. I would lik...

We're considering running Zone-based FW IOS on our border routers which are ASRs. We're used to ASAs with their active/standby feature. Is there an equivalent for ZFW or do we need to rely on OSPF or HSRP?

First time configuring the FWSM. I come from the days where firewalls were actually appliances. I know, so 2007!I am having trouble following the nice 700 page guide on the FWSM. I am going through the chapter on Configuring Failover.I ran into an ...

Hello I hope someone can assist here, I've looked at similar problem summaries but none that quite fits my problem.I've configured an ASA for clientless SSL VPN access into a Citrix Server Farm head.Everything works fine, I can connect ok and enter m...

I'm facing an issue with our ASA 5500. I have configured ASA in Active/Standby mode, but OSPF routes are not getting synchronized to standby unit. Is there any way to have OSPF routes sync between Active and standby unit in ASA 5500.

HiI have a Citrix server who is in DMZ zone. I can connect to a server with RDP port from indside host but not with HTTPS port. How is it possible? Many tanks in advance.Bedst regards sfanayei

Dear Team,I have an FWSM running in L3 mode, installed in C6509E Switch, L3 of all other distribution layer switches are created in FWSM. I have a long running problem of one way communication with this FWSM. IOS version is "FWSM Firewall Version 3.2...

We need some help in a discussion we are having about wccp and where it needs to be to work right. Also note that I have never done WCCP on the ASA yet so not sure if this will work. Here is the concept. I-----RTR------ASA------CVPN3030 --- DMZ -...