Network Security

We have an ASA 5550 cluster behind a PIX 525 firewall. I'm trying to connect to the internet that is behind the PIX 525 from an inside host behind the ASA. I configured overload on the ASA outside interface (Dynamic NAT rule). The ASA outside interfa...

server 1(IP add 10.24.112.5 & Gateway is 10.24.112.1) in zone with security 50 needs to access servers (ip add 192.168.3.3 & Gateway is 192.168.3.1)in zone with security 20.Kindly suggest how to accomplish this.I have tried putting route in the route...

helo, i'm using ASA 5520. I cannot download file from YM.

Version 8.2(1) and ASDM 6.2(1)%ASA-1-199010: Signal 11 caught in process/fiber (Unicorn Proxy Thread)/(unicorn-proxy) at address 0x3ed, corrective action at 0x9ff2340Yesterday I made a DNS change to move my VPN clients over from our vpn3k machines to...

i ewant to kno that now the pix has been changed to ASA & it consists of VPN

Hi all.My company has 2 sites each configured with cisco asa5510 with vpn. Originally site A firewall is configured with only ipsec passthrough while site B is configured with both ipsec passthrough and nat traversal. Users at site B could vpn into s...

Hi all,I have an ASA5505 with a PPPoE WAN connection. In the last days, I receive packets with a 1500bytes MTU size with the "don't fragment" bit set.The weird thing is, the PPPoE can handle only 1492bytes.Here the log:%ASA-6-602101: PMTU-D packet nu...

Hi, we have a web server behind the firewall running different services. On of the services is called admin, allowing certain users access to admin page of the server. We need to provide a sort of url filtering. eg. access to www.webserver.com/admin ...

Dear Sir,I have the following items1) 2 x ASA5520-K92) 10 SSL VPN licenseI want to set up a VPN cluster to provide at least 10 SSL VPN connections.Question:1. Do I need to setup HA before configuring VPN cluster?2. Will the solution support 10+2=12 c...

ASDM 6.2 has been released which *finally* supports configuring IPv6 interfaces and ACLs. Previous versions display a 'IPv6 configuration not supported' if you accessed ASDM with any IPv6 config present on the firewall.In the release notes, Cisco spe...

HelloI am planning OOB L3 real IP deployment and have few questions:1. After CAM decides to which vlan user will be redirected what protocol does it use to tell switch to set this vlan ? For this deployment i found only: http://www.cisco.com/en/US/do...

Hi Experts,I request your help in clarifying the scenario below in FWSM:I want to access my INSIDE interface (ip address 10.1.1.1) from a server located in OUTSIDE interface (ip address 218.248.17.116).I learned that it is not by default possible in ...

I have a VPN established using DES in my firewall ASA5505 outside interface. I manage this device by the outside interface. My source address and the IP address of my machine are not on the vpn domain. When I try to access the firewall using SSH, it'...

I have a asa5510 that we created a seperate DMZ for vendorss to have internet access when they are in the building.We have http, https, dns and isakmp allowed outbound on this DMZ.We have used it before with no problem, but one vendor came in and nee...

Its easy to configure L2L VPN between two ASAs.Is it possible to create a L2L VPN between a cisco ASA and an ISR Router?Whats the major difference between the two configurations?