Hi,If I permit udp traffic specifically in nat0 statement facing problem with configuration sync in failover. Instead if I permit tcp or ip in nat0 statement every thing works fine.What might be the problem?Regards..
Hi Everyone,I am hoping someone can provide some advice regarding an ASA in transparent mode sitting in the middle of a .1q trunk.Scenario is two switches (one routing) has multiple VLAN's setup and then a trunk down to a L2 switch which then has all...
I have a mail server that is in the DMZ which is behind the Cisco 2621 router. I cannot get it to ping past the internal interface. There is a ip nat statement:ip nat inside source list 10 interface Dialer1 overloadBut this is not helping, the Dial...
With the newest Java SE 6 update 13 (& 12 as well), PDM from the PIX 515E (PIX version 6.3(5), PDM version 3.0(4)) can't be launched (ie the PDM window can't display), and this whether I use Firefox 3.0.7 or IE 7.0.5730.13.I'm very very certain it's ...
Can anyone see what I have misconfigured? I have AnyConnect connected on WAN of ASA and I receive an ip address from the pool of 192.168.180.0. I am trying to ping from 192.168.180.x assigned to Anyconnect client to Inside host at 192.168.150.50. I k...
Hi All,I have a PIX 515 6.3 and I want to have the LAN behind a DMZ to access the servers on the inside LAN and also the remote hosts which are routed on a L3 switch.This is what I did :nat (DMZ) 4 192.168.4.0 255.255.255.0 outside 0 0global (inside)...
Hello , Could you review my IPS design (the topology picture is in the attachment) ? Can I have one IPS with three or four ports attached to the same switch in an etherchannel? I am talking about one IPS with multiple interfaces. For example two...
I want to start by thanking everyone for taking the time to ready this. We currently have a Fortigate firewall in place. We have multiple VLANS seperating our voip phone system from the rest of our traffic, and we also seperate out our guest wireless...
It looks like Cisco stopped posting the new signatures on their FTP in cisco/ciscosecure/ips/6.x/sigup as of the end of Feb. As a result the update script is not updating the IPSs any longer. I could not find any advisory about that on CCO. If someon...
Hi, we have a PIX-515E at our customer site. The inside interface is connected to a 3750 switch and the outside is connected to a 3640 router.When trying to ping from the 3750 to the 3640 through the PIX, 10 to 20 packets out 100 get dropped, this ha...
I have an ASA 5510 and was wondering if someone could shed some light on this. If someone internally would install a producted (keylogger or something of that nature) that gathered information and then sent it to a remote location could the ASA dete...
Hello,we have an asa 5510 with software 8.0. We have to Internet Lines, 1 16 Mbit ADSL and 1 4 Mbit SDSL. Internal Users should use the ADSL for faster downloads so the default gw is the ADSL. VPN should use the SDSL. This isn't the problem, i can us...
Does anyone know if the ASA can redirect to a Proxy Server? For example I want to redirect all web traffic (80,443) to my proxy server.Thanks in advance
if i create two context then its working individual ok but i give two IP address on one interface for different context .How its working individually ?
