Resolved! Access-lists with tpc-udp object-group
I am converting from my pix to a ASA 5505.I am having issues making an access list that includes a tcp-udp object-group. Is there a recommended practice for doing this?
I am converting from my pix to a ASA 5505.I am having issues making an access list that includes a tcp-udp object-group. Is there a recommended practice for doing this?
Hi, I'm trying to configure ZBF on a 2811 router with a site-to-site VPN with GRE Tunnel. But, when I configure the Firewall, the tunnel stops. I've tryed adding several protocols like isakmp but it doesnt' work. Does anybody know which protocol to a...
Hi,Anyone of you know the part number for the ASA 5520 FIREWALL mounting kit. I need to mount it on the rack but unfortunately the customer forget to bring the clamp for the ASA. They wants us to order the new kit for it.swami
what would the be side of effects of setting 'timeout conn' to 5hrs? beside the possibly of running out of connection resources. anything security related?i have a client that as a web base report that takes 5 hours to run. things where fine when th...
I'm using VPN client - version 5.0.03.0530. I don't have access to the VPN server configuration.The soft set the default route of my windows xp through the VPN once established. This is a problem since I can't read my mails (hosted on a local server)...
Inside = 10.10.10.0/24DMZ = 10.10.20.0/24Outside interface of ASA5520 = 66.66.66.25DMZ host 10.10.20.50 has a 1-to-1 NAT translation with 66.66.66.27Everythis is fine except that after the DMZ host 10.10.20.50 was configured to have a 1-to-1 NAT tran...
Our VPN clients are able to access all other network resources except those with a static NAT translation on the same router that controls client connections.
I have an ASA with the SSM IPS module in it. I must be doing something wrong because all of my events are showing my internal addresses as attackers and the external addresses as the victims. We do have citrix servers that we use and so I am gettin...
Has anyone ever implemented VRF routing within IPSEC VPN tunnels on an ASA 5580? Thanks,-Alonzo
Hey guys,I have two 6500's with FWSM's. The 6500's have a VPN connection from each to a PIX for VPN between two sites. The route out of the FWSM is the HSRP of the two 6500's so while both connections are up there's no problem. However, if one VPN...
Hi all,I got a problem in the firewall network. One of the inside servers got virus and generated a huge TCP connections with other unknown hosts outside. Eventually, it depleted the connection resource and made the ASA5520 frozen. I had to disconnec...
I generate the cert request from NAC CAM and give the file to the customer. Then customer give me back several file including "CAM.key, CAM.crt and CAM_DigiCertCA.crt".When I import to the NAC, it fail and got the message "Must include end entity cer...
I have ASA 5510's that authenticate users to the Active Directory. Is there a way to prevent users, that even though they are validated through the AD from being to establish a VPN connection?
We have a ASA 5520 and we are seeing a lot of traffic on our outside and dmz interfaces. we intend to capture packets on those interfaces can someone help me with how we can ,,,with minimal cpu utilization ,, coz cpu is already at 85% now,,,Thnx muc...
Hi,I would like to audit all changes made on my ASA 5540 (software version 7.2).Is there a way to do that?How is the best way?Thank youTauer
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 01-21-2026 03:34 PM | ||
| 01-21-2026 11:24 AM | ||
| 01-20-2026 01:44 PM | ||
| 12-31-2025 01:53 AM | ||
| 12-15-2025 09:32 PM |
| User | Count |
|---|---|
| 4 | |
| 4 | |
| 3 | |
| 2 | |
| 1 |