Network Security

I have a client that has a WAN established between 5 offices which share a single internet connection from the HQ. They want each office to have direct Internet access to free bandwidth. They require that if the branch office ISP fails that they have...

when I upgrade from 6.1.1(e3) to 7.0 do I need to purchase a new license file?

I need to allow access to the ASDM for the ASA firewall but wanted to restrict the access level these users would have when connected. We're authenticating through the ACS server, rather than locally on the device. This ASDM access would be mainly to...

This is probably a shot in the dark. I was required to setup a site-to-site vpn for a partner. I remote accessed in from home and started the wizard. Once I finished the vpn wizard, I noticed I couldn't access the Internet from servers within the LAN...

Hey everyone,I'm configuring an ASA 5505 with the Security Plus bundle running Version 7.2(4) Software. I'm trying to get my DMZ setup correctly. I have successfully got inbound access to my DMZ from my inside interface working so I can remotely mana...

Hello:We have an internal application (Server-A) that has a hardcoded IP for LDAP lookups. The LDAP server is also internal, but on a different interface/VLAN of the ASA. The LDAP server (LDAP-A) is experiencing problems, and I would like to temporar...

I have an IB setup and am requiring all users to use the Clean Access Agent. Since the Agent will go through the requirements at every login even if the device is already on the certified device list, is it necessary to clear the certified device lis...

Are there any gotchas when trying to configure this?I tried to configure this using:global (external) 1 x.x.x.66nat (inside) 1 0.0.0.0 0.0.0.0And I was not able to ping any external devices. However, prior to this configuration, we had another device...

Hi We have site2site VPN with ASA 8.03 and I configured the QoS on ASA outside interface. But there is no traffic mapping the QoS, here is my QoS setting and show service-policy output. In the output, there is no traffic mapping the class-map ERP. An...

Hi all, today we had a failover event on a pair of asa5505's running 7.2(4). The standby took over fine and no impact was seen to traffic, strangely, after 58 minutes the primary came back and took over. Running show fail on both units gives the corr...

how we config a ASA into transparent mode.....and what does actually that mean....i am really new to ASA.....is it possible to do it via GUI??? thanks guys

Hello - I have a CAS appliance configured for both VPN Auth SSO, and Windows Auth SSO. So which one will it attempt to run first? I ask because sometimes when I login over our RA VPN, I notice that the VPN auth provider logged me in, and others, I no...

I am trying to get my ASA5505 to sucessfully transport t-home IPTV Multicast traffic to my SetTop box.The key to get this done seems to be enabling the "ip igmp helper-adress" which unfortunately is only found in IOS code.I am not sure if the multica...

Hi Experts,I am using FWSM. I have 2 interfaces configured named Internet (Security-Level 0) and Server(Security-Level 100).I also configured icmp permit any Servericmp permit any InternetBut I am able to ping the interface Internet from Internet zon...