Network Security

with my last post, I got bidirectional nat to work from outside -> inside. Config below:global (inside) 99 10.153.99.1nat (outside) 99 10.148.12.0 255.255.255.0 outsideNow, the problem is getting NAT to work from inside -> outside. This is the error ...

Hi, I've upgraded one IPS (ASA-SSM-20) to release 7 and now I can't see any events on it and obviously MARS doesn't receive any data from IPS. I've tested that virtual sensor is assigned to Gigabit Ehternet 0/1 and Global correlation seems to work ok...

I need some help on how to deploy this setup. The fios internet connection was installed in our data center but the public users are located on the other end of our network. Hence, this connection needs to traverse thru our internal network. I wou...

What could cause this message, shouldn't this part show the subnets I'm connecting via the tunnel. I'm guessing that it is anaccess-list issue"local Proxy Address 0.0.0.0, remote Proxy Address 0.0.0.0"I'm also gettng "Invalid ID info (18)"Thanks for...

I have just replaced a Raptor firewall with a Cisco ASA 5505. On the Raptor, I could specify that all inbound traffic on the outside interface be transformed into a 10.1.2.x address from a pool. What is the equivalent command on a Cisco? I had two...

Has anyone tried configuring the ASA in multiple-context mode.Is the cisco ASA truly able to justify its mulitplicity.what are the issues encountered.

Trying to setup a l2l vpn between 2 ASAs and came across this in the logThanksJun 21 17:07:46 [IKEv1]: Group = 71.172.68.18, IP = 71.172.68.18, IKE Remote Peer configured for crypto map: vpn_mapJun 21 17:07:46 [IKEv1 DEBUG]: Group = 71.172.68.18, IP ...

we noticed a sudden spike in the CPU Utilization of IPS 4240 Can you pls let us know the steps to figure out the cause ???

I have created a new group policy & tunnel group for 2 webvpn svc users. When I connect logging tels me no address is assigned although I have assigned a pool, if I allocate the same pool to the defaultwebvpngroup the user connects ok.I only want two...

Hi,Can Anyone advise the risk of replacing the stateful failover IP of FWSM (interchassis model) in production environment...Thanks,

hi friends,asa 5500 series firewall will having web filtering,content filtering,user wise web surfing ,control the downloading the follwing features or not

Hello, I am stuck in Production environment. I did some changes. And now I am not able to do 'config t' on FWSM. THe response is 'ERROR: Command authorization failed'Currently, there are total of 3 users. One is privilege level 2 (admin) and other tw...

Hi,I'm trying to get working concurent VPN Remote Access connections and VPN L2L connections with different isakmp identities.RA VPN clients should connect using PKI (certificates) and L2L equipments with PSK. The issue is:- When I use crypto isakmp ...

Is this a known problem - I have an ASA 5510 running 8.4(4) this afternoon all the connections through the firewall were being denied for some devices. The other services hosted on the same servers were working (through a different firewall) but the ...