Network Security

Hi, I have configured a RA VPN in a pair of Cisco ASA 5520 with LDAp authentication and local ip address pool. The RA VPN is working fine when I connect it from a direct internet with a public ip assigned to the client desktop without any firewall o...

Dear Friends,I have an ASA 5510 with CSC module. Its plus license is expiring in 10 days, however base license expires after 1 year only.Will the CSC module continue to pass traffic and not block it just because my Plus license is expired. Or will it...

Hi,I am having an issue with users running IE8 with smart tunnels. The user is able to connect and smart tunnels show they are started, when the users launch RDP, they are seeing "Security polices were applied to your session, access to some resource...

does anyone know if the ASA will support vrf route 'bleeding'...ie; vrf A allowed to speak to vrf B?

I want to put an ASA with 2 interfaces, one outside, the other a dmz interface. In the DMZ will be a server, however, the server will have a public IP address assigned to it, so not NATng will take place. How do I setup the interfaces and allow the o...

Last week I had to upgrade a pair of PIX 515E's running active/standby failover and it did not go as expected. I was going from 7.24(18) to 7.24(30). I uploaded the image to the flash on each, and set the boot parameter. I then rebooted the secondary...

I need a 2 interface firewall with Static NAT support and also logging capability. Maximum connections will be around 20 with http/https traffic.What is the ideal device? Is it IOS firewall or PIX?

Hi,ISP terminated in Router , I have two internet segment IP address . from the both segment IP address assigned in ASA and it directly connected to router with seperate interfaces.Default route add for outside interface, another interface dmz1 shou...

Dear concern,We have two ASA 5520 and configured lan base fail over.But failover not working as per expectation.Please find attachment of show tech of both ASA.RegardsImran

I am trying to figure out a way to allow access to a handful of URLs and block the rest for an entire segment of my network. All of the documentation I have found describes doing the opposite with regular expressions (Domain Blocking Lists). I am h...

Hi, have following setup on ASA 5520:Internal LAN (1.1.1.1) on g0/1DMZ LAN (2.2.2.2) on g0/2Outside interface (3.3.3.3) on g0/0Static NAT map 2.2.2.2 to 192.168.1.1, on server running web servicesFrom internal LAN I can access Internet, from internal...

I have an ASA5520 running 8.0.4. I need to create a tunnel with a vendor using the same internal network as we are. They are unable NAT on their side. I would like both sides to be able to bring up the tunnel. They are using 10.2.x.x/16 as their inte...