Network Security

Hi,iam having problems accessing ip addresses from the subnet (WAN):portmap translation creation failed for tcp src inside:172.21.4.21/4527 dst outside:192.109.XXX.XXX/443This happens only to this range 192.109.X.X there is no special routing/acl/nat...

On an ASA 5505 I receive the following syslog ID 199010, severity = 1:When doing any packet capture in the ASDM wizard. Signal 11 caught in process/fiber (Unicorn Admin Handler)/(NULL) at address 0x8a7aaf6d, corrective action at 0x0The error appe...

We have two areas of public IP addresses. Both are configured in the ASA5510 (7.2.4, failover A/S, functions: VPN-Server, VPN L2L, SSL-VPN, Firewall, NAT)): interface Ethernet0/0.100 description ### Path A ### vlan 100 nameif outside-1 security-level...

Dear Sir,The following acl is applied to the asa inside interface.access-list 100 permit tcp host 192.168.0.1 any eq 5017access-list 100 deny ip any anyaccess-group 100 in interface inside.Netstat in windows command prompt shows that the connection o...

Hello, I have 2 PIX 525 running version 7.2(1). I have it setup a serial cable failover. The problem is when I run a show fail command it list that the outside interface is up and running and failover is working fine. but on the other 2 interfaces, ...

Hi,I have the following scenario: Outside | ASA--DMZ (valid IP range/28) | Inside (10.0.0.0/20) I need to set up the ASA so that traffic originating from a DMZ host, with destination being the ASA's outside IP address and port 25/tc...

we are trying to implement per user split tunneling using ACS. In the past attribute ipsec-split-tunnel-list was used for ipsec clients and that works fine. Tested with any connect and this attribute does not appear to work. Questions:Is this attribu...

Hello,i have installed and configured 2 ASA5510 in failover (Active/Standby) and everything work fine, when the primary unit(active) fails, the secondary unit(Standby) assumes the role of active, however, when the primary unit (standby) returns to it...

Has anyone used Flexible Packet Matching (FPM) to block access to proxy servers?

If I issued "show threat-detection rate"I dont know what is different between Trigger and Event(Average(eps) and Current(eps))?How are measure and increment both parameters??I read all documentation but I still understand this topic.

Hello,On my ASA I have this rule, is it a default rule as I have never added this myself:access-list outside_mpc extended permit ip any anyThanks

Hi all,I have read through countless posts on my question and have gleaned a lot of information from them.My scenario is this.We have a 6500 core connected to two ASA's in active/standby mode. The ASAs are connected to two 3550 switches which are pro...

hi,I am trying to publish a web site on 80.2.100.85/80 and access it from 78.109.177.183. when I try to access the server on port 80, I get the following log message: Deny tcp src WAN:78.109.177.183/64679 dst PRG_LAN:80.2.100.85/80 by access-group "P...