Network Security

I am trying to figure out a way to allow access to a handful of URLs and block the rest for an entire segment of my network. All of the documentation I have found describes doing the opposite with regular expressions (Domain Blocking Lists). I am hav...

Hi, have following setup on ASA 5520:Internal LAN (1.1.1.1) on g0/1DMZ LAN (2.2.2.2) on g0/2Outside interface (3.3.3.3) on g0/0Static NAT map 2.2.2.2 to 192.168.1.1, on server running web servicesFrom internal LAN I can access Internet, from internal...

I have an ASA5520 running 8.0.4. I need to create a tunnel with a vendor using the same internal network as we are. They are unable NAT on their side. I would like both sides to be able to bring up the tunnel. They are using 10.2.x.x/16 as their inte...

I have 2 ASA5510-CSC20-K9, exactly identical do i need to have failover license Thanks

We have an ASA 5550 cluster behind a PIX 525 firewall. I'm trying to connect to the internet that is behind the PIX 525 from an inside host behind the ASA. I configured overload on the ASA outside interface (Dynamic NAT rule). The ASA outside interfa...

server 1(IP add 10.24.112.5 & Gateway is 10.24.112.1) in zone with security 50 needs to access servers (ip add 192.168.3.3 & Gateway is 192.168.3.1)in zone with security 20.Kindly suggest how to accomplish this.I have tried putting route in the route...

helo, i'm using ASA 5520. I cannot download file from YM.

Version 8.2(1) and ASDM 6.2(1)%ASA-1-199010: Signal 11 caught in process/fiber (Unicorn Proxy Thread)/(unicorn-proxy) at address 0x3ed, corrective action at 0x9ff2340Yesterday I made a DNS change to move my VPN clients over from our vpn3k machines to...

i ewant to kno that now the pix has been changed to ASA & it consists of VPN

Hi all.My company has 2 sites each configured with cisco asa5510 with vpn. Originally site A firewall is configured with only ipsec passthrough while site B is configured with both ipsec passthrough and nat traversal. Users at site B could vpn into s...

Hi all,I have an ASA5505 with a PPPoE WAN connection. In the last days, I receive packets with a 1500bytes MTU size with the "don't fragment" bit set.The weird thing is, the PPPoE can handle only 1492bytes.Here the log:%ASA-6-602101: PMTU-D packet nu...

Hi, we have a web server behind the firewall running different services. On of the services is called admin, allowing certain users access to admin page of the server. We need to provide a sort of url filtering. eg. access to www.webserver.com/admin ...

Dear Sir,I have the following items1) 2 x ASA5520-K92) 10 SSL VPN licenseI want to set up a VPN cluster to provide at least 10 SSL VPN connections.Question:1. Do I need to setup HA before configuring VPN cluster?2. Will the solution support 10+2=12 c...

ASDM 6.2 has been released which *finally* supports configuring IPv6 interfaces and ACLs. Previous versions display a 'IPv6 configuration not supported' if you accessed ASDM with any IPv6 config present on the firewall.In the release notes, Cisco spe...

HelloI am planning OOB L3 real IP deployment and have few questions:1. After CAM decides to which vlan user will be redirected what protocol does it use to tell switch to set this vlan ? For this deployment i found only: http://www.cisco.com/en/US/do...