We have a few site to site VPN connections with 5505's. Is there any way to setup a redundant config incase the first one goes down it would reestablish to a second firewall with a different ISP? I am using 5520's at both ISP's.
ntp server whatever source outside prefer ... is working flawlessly but when I try:...name 192.5.41.209 server-ntp-USNO description US Naval Obervatoryname 128.115.14.97 server-ntp-LLL description Lawrence Livermore Laboratory...ntp authentication-ke...
I want to deploy NAC in my company, I have some questions about NAC: 1. If I deploy 1 NAC server and 1 NAC manager with IN-BAND: - When NAC server dies (NAC manager oprates), traffic is bypass or not? what things will happens? - When NAC manager dies...
I'm having some troubles setting up a new firewall. (I'm new to firewalls)I've got the unit up with configured IP addresses on inside and outside. Downloaded and installed ASDM software. I can't seem to get it to pass traffic. The unit is being used ...
Hi Guys,Am I supposed to be able to ping an internet address sourced from the inside interface?ping inside 1.1.1.1I can ping this address from outside interface.Here is my config:interface Ethernet0/0 nameif outside security-level 0 ip address 2.2.2....
Hi,I was reading about Nat-Control.More I read it more confusion.It comes disabled with version 7.0 and more.It is something;When nat-control is enabled NAT is required for all traffic flowing across the security appliance. When nat-control is disabl...
Hi allI would like to know what exactly means the restriction aplied with base license that comes with ASA 5505 regarding inside hosts.I've readed that every host connecting from inside to outside (internet access and so son) counts as one, but all h...
I am trying to set up a VPN using a 871 router. The VPN is to be used by a remote client who will gain remote access to a PC using NetSupport software, a product similar to PCAnywhere. I am able to establish the VPN connection but the NetSupport soft...
Hi,I have to sugest a solution to my customer which can support 02 different ISPs simultaneously in active mode on ASA5505-SEC-BUN-K9. Is this solution possible.Thanks & Regards
Hi I am doing a practice laboratories I have a madule AIM-IPS-K9 in a router 2811 and I have configurated the interfaces how say the link: http://www.cisco.com/en/US/docs/security/ips/6.2/configuration/guide/cli/cli_aim.html#wp1044942 I want to kno...
I have an issue with the ASA, multiple contexts and shared interfaces. I have read through the documentation on Cisco.com and also looked through the posts here, but my specific question is not really answered.I have two contexts running on an ASA v8...
We have a Cisco ASA connected to the internet through a Cisco 3800 series router. On the inside of the ASA we have a server that is published onto the internet (Static NAT on the ASA to a public IP).For some reason we require a sucessful traceroute t...
I need to group the following ports for a VoIP device.514 UDP1194 UDP3480 UDP49000-50000 UDP443 TCPI obviously don't want to make 1000+ entries in the PIX config, and I'm a tad confused on the object-group and then how to apply it.Single IP, translat...
Hi,I have a problem, in that servers on vlan 111 are intermitent in communicating them selve. This vlan 111 is trunked with vlan 100 to pix gB-ethr3. Th server gateways are the vlan111 on the pix. (v100 physical, v111 logical, only one switch 4948 is...
