Network Security

ASDM 6.2 has been released which *finally* supports configuring IPv6 interfaces and ACLs. Previous versions display a 'IPv6 configuration not supported' if you accessed ASDM with any IPv6 config present on the firewall.In the release notes, Cisco spe...

HelloI am planning OOB L3 real IP deployment and have few questions:1. After CAM decides to which vlan user will be redirected what protocol does it use to tell switch to set this vlan ? For this deployment i found only: http://www.cisco.com/en/US/do...

Hi Experts,I request your help in clarifying the scenario below in FWSM:I want to access my INSIDE interface (ip address 10.1.1.1) from a server located in OUTSIDE interface (ip address 218.248.17.116).I learned that it is not by default possible in ...

I have a VPN established using DES in my firewall ASA5505 outside interface. I manage this device by the outside interface. My source address and the IP address of my machine are not on the vpn domain. When I try to access the firewall using SSH, it'...

I have a asa5510 that we created a seperate DMZ for vendorss to have internet access when they are in the building.We have http, https, dns and isakmp allowed outbound on this DMZ.We have used it before with no problem, but one vendor came in and nee...

Its easy to configure L2L VPN between two ASAs.Is it possible to create a L2L VPN between a cisco ASA and an ISR Router?Whats the major difference between the two configurations?

I'm setting up a ASA5520 (version 8.2(1))and would like to enable Traceroute from the Inside to the Outside. Most articles tell you to use ICMP Inspection instead of ACL's for this. ICMP Inspection appears to only allow replies that are from the d...

Hello,Is there any way to change the administrative distance on the reverse-route feature of VPN tunnels? When using reverse-route it installs it as static, which gives it an admin distance of 1 it seems, so makes it very hard to use that as a backu...

We just migrated to an ASA5550 and an internal contractor cannot finish ISAKMP negotiation back to her IPSec VPN server (it's a Nortel client). She does get her DNS and IP adddress, so I presume something is trying to connect back to her PC. We fixe...

Hi All, whenever I turn on debug in ASA to start troubleshooting, it shows lots of output from access-list and connection teardown, and I can't see my debug output. how can I turn off those message to see debug output instead? any suggestion would be...

Hello,I am having issues with the IPS sensor not doing the global correlation updates. The IPS module has access to the internet and I can ping the server which serves the updates. Anything else to be checked?

hi,we have AIP-SSM-40 modeule installed on ASA 5540 but it is just physically present.Is it possible to configure to this modeule in inline or like IDS mode? It has only one Ethernet interface. Can this interface be treated as sensor interface and ma...