Network Security

We have the branch and Head Office connected through MPLS. On thr branch router we have the LAN connected to inside of ASA and outside interface terminates the MPLS link. We have the same security levels on both outside and inside interface. We have...

Hi All, I'm running version 8.0(3) k-8 on the ASA5505's in Active/Standby mode. Everything is operational, no known problems, except every time we rebooted the ASA's the "crypto isakmp nat-traversal" statement went to the default mode. Which is "No ...

Hi,We use ASA firewall at many of our offices to provide S-S IPSEC VPN connectivity to our customers.Typically we need to establish S-S vpn to two different sites at customer end, one being primary and other being backup.Both tunnels need to have the...

Hello,I needed to find out what IP addresses were being used on my DMZ. I am on the internal network, and the DMZ is on the DMZ port of an ASA.I launched a ping scan for the DMZ subnet. It finished. I know could not ping anything on the DMZ subnet...

I have already configured IPSec VPN between router and ASA.That is possible to reach hosts from remote location 192.168.201.0/24 via VPN to dmz-vlan13?So I need traffic from 192.168.201.0/24 via VPN to be pated to the DMZ-13.In log I found :No transl...

When we check sh conn local or foreign with the ip address on ASA..sometimes it just shows the no. of active connection counts and no the actual connections.Whats the reason for that & is there another way to see the conn during that time?Thanks.

Using ASDM Launcher v1.5(22) to manage two stand alone ASA devices. ASDM launches fine for one of the devices, but not to the other. Error log shows:DM Launcher Version checking failed with javax.net.ssl.SSLHandshakeException: Remote host closed co...

I only upgraded the primary from 50-100 SSL-VPN licenses, and now failover is not working.Is there anyway to bypass this? The other firewall has 50 licenses, but no idea when I'll get those increased.Thanks

Anybody have a recommendation for the best config help for ASA5505.

Hi,I have Cisco ASA5510 ,and configured the interface 0/0 as a OUTSIDE and assigned an IP address,interface 0/1 is assigned as a INSIDE and assigned an IP address,I have configured the interface 0/3 as a DMZ ,and assigned an IP address and NATTING an...

Hello all, We are presently running FWSM 2.3(3)6 and are upgrading to the 3.2 code train. My question is if we are presently running NAT exemption with plans of implementing no nat control post upgrade, are there any caveats/implications to doing...

I have an issue where a client is using the Cisco VPN client from behind a firewall. The client is on a 10.0.0.0/8 subnet, and the devices that they are trying to access are on a 10.2.128.0/24 subnet. Because the Clinet software only adds a 0.0.0.0 r...

I have a new ASA 5510. I do I get around the followng error: "ASDM unable to read the configuration from ASA"

Dear all ,I have IPS 4270 that was working fine. But since 1 week,i was not able to access IPS and was giving error when pulling the configuration from IME (kindly see the attach).Also the sensor's health shows that the status of "application failed...