Network Security

If you want to manage a transparent firewall that resides in a different VLAN/IP subnet do you just add a route to the transparent firewall back to the managing host?

Hi all,I would like to ask for a help:I got my hands on pix 501 and I'm supposed to run vpn on it in our network. It is placed behind an ADSL wifi router with dhcp. So i configured the outer interface to be part of our network (10.0.0.0/24). I used h...

Hi all. My company has many site offices all over the world and the staff working in my HQ office need to support the multiple site offices worldwide. They do their support by establishing vpn to the various site office. All my site office are instal...

Hi, During these days I am reading about QOS configuration on ASA but I am bit confused on how to define the bandwidth. Suppose we have 2 MBPS link (1:1) and when we will define the bandwidth then what wud be the speed. As I know in 2MBPS we can get ...

I have ASA 5505's up until yesterday they had a working VPN for months. Yesterday we had to change the public IP's for both 5505's. The first ASA #1 has about a dozen VPN's configured on it and is having no other issues except for this particular VPN...

I've configured my ASA5505 to allow SMTP out from and into the network. However, when I do a telnet test on port 25 to my relay server, it fails with the following (log traces):7|Sep 04 2009|12:22:20|609002|62.69.62.120||||Teardown local-host outside...

I am wondering what the benefits of bridged mode are in both the FWSM and the ACE implemenation. I am so used to routing everything that I have never used the bridge feature.For my particular case I will have two server farms hanging directly off th...

Hi Please let me know if the rout-map feature can be used in ASA just as we use multiple features in Cisco IOS Router .i.e can we use the set ip next-hop command in the same ? I have read that in the ASA this feature is to accomplish redistribution b...

HiIs it possible to have seconday ip address on OUTSIDE Interface of ASA 5540 8.0(4) ? I am trying to get new ip scheme for our network and I have 1200 tunnels terminating to this box.I want to gradually move them to new IP address rather than replac...

Hi We have two Cisco ASA5520 setup in Active / Failover mode. We are running low in memory on the primary and have ordered a extra 512MB Flash Card.Anyway does anyone know if we have to do anything special to install this or can we just plug this int...

Hello,Does anyone know why packets dropped are incrementing on the ASA when you do a show interface command? It's incrementing on all of my ASAs, was wondering if this is normal and could it be from the ACLs denying the traffic therefor showing it as...

I have a client with the Cisco ASA SSM 10 module that is blocking roaming profiles from loading correctly. The issue goes away when the IPS is disabled. After I re-enable the IPS, it stops working and I see the following message in the log file:4 S...

ASA55xxxI understand how to configure redundant/backup ISP connection using static route tracking.How do you accomplish this with a dynamic next-hop route on the backup connection such as with cheap DSL?Thx - Phil

I currently have a couple public servers on our internal network and i'm using the new Public Server option in ASA 8.2. What i have done is created a new interface on my asa called DMZ with sub interfaces in addtion to my current Inside and Outside. ...

Hi GuysAttached diagram represent my planned lab setup in which VLAN 80 will be the outside interface configured with Public IPs. (2.2.2.0/28). 2.2.2.1 will be the VIP (HSRP) ip of the router interface and 2.2.2.2 & .3 will be configured on the route...