Network Security

I want to put an ASA with 2 interfaces, one outside, the other a dmz interface. In the DMZ will be a server, however, the server will have a public IP address assigned to it, so not NATng will take place. How do I setup the interfaces and allow the o...

Last week I had to upgrade a pair of PIX 515E's running active/standby failover and it did not go as expected. I was going from 7.24(18) to 7.24(30). I uploaded the image to the flash on each, and set the boot parameter. I then rebooted the secondary...

I need a 2 interface firewall with Static NAT support and also logging capability. Maximum connections will be around 20 with http/https traffic.What is the ideal device? Is it IOS firewall or PIX?

Hi,ISP terminated in Router , I have two internet segment IP address . from the both segment IP address assigned in ASA and it directly connected to router with seperate interfaces.Default route add for outside interface, another interface dmz1 shou...

Dear concern,We have two ASA 5520 and configured lan base fail over.But failover not working as per expectation.Please find attachment of show tech of both ASA.RegardsImran

I am trying to figure out a way to allow access to a handful of URLs and block the rest for an entire segment of my network. All of the documentation I have found describes doing the opposite with regular expressions (Domain Blocking Lists). I am h...

Hi, have following setup on ASA 5520:Internal LAN (1.1.1.1) on g0/1DMZ LAN (2.2.2.2) on g0/2Outside interface (3.3.3.3) on g0/0Static NAT map 2.2.2.2 to 192.168.1.1, on server running web servicesFrom internal LAN I can access Internet, from internal...

I have an ASA5520 running 8.0.4. I need to create a tunnel with a vendor using the same internal network as we are. They are unable NAT on their side. I would like both sides to be able to bring up the tunnel. They are using 10.2.x.x/16 as their inte...

I have 2 ASA5510-CSC20-K9, exactly identical do i need to have failover license Thanks

We have an ASA 5550 cluster behind a PIX 525 firewall. I'm trying to connect to the internet that is behind the PIX 525 from an inside host behind the ASA. I configured overload on the ASA outside interface (Dynamic NAT rule). The ASA outside interfa...

server 1(IP add 10.24.112.5 & Gateway is 10.24.112.1) in zone with security 50 needs to access servers (ip add 192.168.3.3 & Gateway is 192.168.3.1)in zone with security 20.Kindly suggest how to accomplish this.I have tried putting route in the route...

helo, i'm using ASA 5520. I cannot download file from YM.

Version 8.2(1) and ASDM 6.2(1)%ASA-1-199010: Signal 11 caught in process/fiber (Unicorn Proxy Thread)/(unicorn-proxy) at address 0x3ed, corrective action at 0x9ff2340Yesterday I made a DNS change to move my VPN clients over from our vpn3k machines to...