Network Security

ASA Version 7.2(3)Global NAT on outside Interface plus two Static PAT on the same outside address.But the static PAT don't work.Configuration as follow:(omitted)name 192.168.100.60 LAN_RDPname 192.168.100.100 LAN_SMTP(...)access-list inside_nat0_outb...

I have previously set up an ASA to authenticate VPN users against Active Directory in version 7.x Can a PIX running 7.x do the same thing?

Greetings- From time to time I come across an issue which I have to determine if certain web content is being blocked by the ASA. Having limited html knowledge, how can I determine for sure the content that is being blocked maps to the log message I ...

Hi all guru,I'm just curious if it is necessary to implement NAC Appliance & CSA in the same environment? This is because if i'm not wrong, i thought "Cisco Clean Access Agent" will be installed on Client as well? Hope to hear come feedback from all ...

Hello,I have two sites i have configured as below:VOIP -> Router -> Gateway (VSAT).See config (question afterwards)Current configuration : 2030 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecservice passwo...

Hi,I'm attempting an upgrade from 12.4-18 to latest 12.4-24T on a 1841 (my point for upgrade is to allow TCP out of order segments through the firewall which seems to have been introduce in 12.4-11T).The router uses NAT, and a PPP dialer for an ATM (...

Hello,If I read the documentation, I have to go to ACL Editor/Access Rules, and click "Log matches against this entry"However, my statefull rules are configured under ACL Editor/Firewall Rules, and there I do not have the option "Log matches against ...

I have two ASA 5520 and two ASA 5540. On the 5540 there are some site to site VPN's. I have upgraded all 4 of them from version 7.2.2 to 8.0.4 and suddenly all site to site vpn's could ping a database server (oracle) could connect with sql and run qu...

Hi,I have a trick case with a ASA 5520 and a intranet in Internet Explorer. There is a picture, flash and document manager and the trafic get blocked when using IE, but not in Firefox. The intranet is using port 80. Anyone else seen something like th...

Hi, I have configured an ASA recently. After finishig of basic configurations, I tried ping from inside to outside interface and vice versa. But ping is not successful. I was getting ?????. I have tried "icmp permit any OUTSIDE" and "icmp permit any ...

Hello All,I'm fairly new on ASA world. I have a pair of ASA 5520 active/standby failover running version 8.0(4). I'm not sure if these issues that I'm facing are related to this software code but here are the issues:* CIFS access on the clientless SS...

I have configured a VPN client connection in a PIX 506. The VPN client user gets a solid connection to the pix & an IP address assignment from the pool. But he is unable to connect to any address on the local network. John G.

I'm getting hundreds of triggers on signature 5748 Non-SMTP Session Start. When I put a block host on this signature I stop getting e-mail. Should this be considered normal traffic.

I've just been looking at the performance stats for the firewalls we have (Nokia) and the firewalls we are planning to get (ASA) and found the following: Nokia IP560FW - large packets 6.0 Gbps VPN - large packets 1.78 Gbps, AES256 CPS - 58,000 CPS Ma...