Network Security

I am trying to figure out a way to allow access to a handful of URLs and block the rest for an entire segment of my network. All of the documentation I have found describes doing the opposite with regular expressions (Domain Blocking Lists). I am hav...

Hi, have following setup on ASA 5520:Internal LAN (1.1.1.1) on g0/1DMZ LAN (2.2.2.2) on g0/2Outside interface (3.3.3.3) on g0/0Static NAT map 2.2.2.2 to 192.168.1.1, on server running web servicesFrom internal LAN I can access Internet, from internal...

I have an ASA5520 running 8.0.4. I need to create a tunnel with a vendor using the same internal network as we are. They are unable NAT on their side. I would like both sides to be able to bring up the tunnel. They are using 10.2.x.x/16 as their inte...

I have 2 ASA5510-CSC20-K9, exactly identical do i need to have failover license Thanks

We have an ASA 5550 cluster behind a PIX 525 firewall. I'm trying to connect to the internet that is behind the PIX 525 from an inside host behind the ASA. I configured overload on the ASA outside interface (Dynamic NAT rule). The ASA outside interfa...

server 1(IP add 10.24.112.5 & Gateway is 10.24.112.1) in zone with security 50 needs to access servers (ip add 192.168.3.3 & Gateway is 192.168.3.1)in zone with security 20.Kindly suggest how to accomplish this.I have tried putting route in the route...

helo, i'm using ASA 5520. I cannot download file from YM.

Version 8.2(1) and ASDM 6.2(1)%ASA-1-199010: Signal 11 caught in process/fiber (Unicorn Proxy Thread)/(unicorn-proxy) at address 0x3ed, corrective action at 0x9ff2340Yesterday I made a DNS change to move my VPN clients over from our vpn3k machines to...

i ewant to kno that now the pix has been changed to ASA & it consists of VPN

Hi all.My company has 2 sites each configured with cisco asa5510 with vpn. Originally site A firewall is configured with only ipsec passthrough while site B is configured with both ipsec passthrough and nat traversal. Users at site B could vpn into s...

Hi all,I have an ASA5505 with a PPPoE WAN connection. In the last days, I receive packets with a 1500bytes MTU size with the "don't fragment" bit set.The weird thing is, the PPPoE can handle only 1492bytes.Here the log:%ASA-6-602101: PMTU-D packet nu...

Hi, we have a web server behind the firewall running different services. On of the services is called admin, allowing certain users access to admin page of the server. We need to provide a sort of url filtering. eg. access to www.webserver.com/admin ...

Dear Sir,I have the following items1) 2 x ASA5520-K92) 10 SSL VPN licenseI want to set up a VPN cluster to provide at least 10 SSL VPN connections.Question:1. Do I need to setup HA before configuring VPN cluster?2. Will the solution support 10+2=12 c...

ASDM 6.2 has been released which *finally* supports configuring IPv6 interfaces and ACLs. Previous versions display a 'IPv6 configuration not supported' if you accessed ASDM with any IPv6 config present on the firewall.In the release notes, Cisco spe...