Network Security

getting the error message %ASA-vpn-4-713903: IP = x.x.x.x, Header invalid, missing SA payload! (next payload = 4)on a VPN tunnel initiation, this is the first time this tunnel has tried to connect and we are seeing this issue.Any Ideas. Thanks

Hi Everyone,I'm working out a concept here and want to know if this can be done. On an ASA I would like to have 2 different interfaces connect to 2 different ISP's - one primary, one backup. As well I will be running VPN tunnels across the links. Wha...

Hi Guys!Can anyone help me in providing a link that describes the features of the below 2 images : 7.2.4 and 7.2(2-26) and the difference between them.Thanks.Jean

Hi to all,i have a simple question, is possible to configure an asa for a site to site vpn and to configure pat for internet connectivity at the same time?

Hey,I have 2 x pix515e's to setup. This is for a colo so there are no workstations/users on the lan/secured int. However i do have sql servers that i would like to keep out of the dmz from the web servers. should i setup the pix with 3 interfaces: 1 ...

Just a quick open question I hope.After recently reading about reflexive access-lists on Routers I was wondering if they are required on Cisco PIX or ASAs?Or is this kind of thing taken care of as default behavious on a security module such as this?T...

good morning guys! we recently procured an ASA-5510 app. went thru the ASDM Setup wizard with External and Internal config. public and private IP's already established. accdg to the ASA doc, internal clients should be immediately able to get outb...

Hello,I've faced to an interesting thing at my GRE tunnels.sometime packets which I've defined a static route to tunnel as below don't route to GRE tunnel.ip route x.x.x.x 255.255.255.255 Tunnel0but when I remove it and add it after a short time it r...

Our setup is this. Call comes in via SIP Trunk, routes to CallManager through ASA and back out through to the remote site via VPN. Yeah, it's a complex setup I know. The problem is that when a caller calls and gets connected with a user, the calli...

While in ASDM via the management interface, I get ASA log entries every 30 seconds with 'deny TCP (no connection) from *** to ***/443 flags FIN ACK on interface management'. Operation of ASDM is not impacted, but I'd like to correct this if possible...

Dear All,I am thinking to configure a Policy Nat associated to a Static Identity Nat in order to exclude my internal networks from nat.access-list POI_NET1_POLICY_NAT extended permit tcp 192.168.0.0 255.255.252.0 object-group mail2 eq wwwstatic (insi...

Hi all,How can I see the current local host sessions through ASDM (grafically, like show local-host). Actually, I would like to know which local host is using how much bandwidth.Thanks,Norbert

Could someone explain the real differences between these two options on the ASA 8.2 release? I know a DMZ is assigned a different security level and the device has a real public IP assigned to it where the Public Server option is a server with a inte...

Hi,I have two FWSM in multiple contexts mode and working as active/standby. I configured DHCP relay on one context interface (DMZ), using the ASDM graphical interface. When applying the configuration, a failover occured, which led to loss of connecti...