Network Security

I have a client VPN setup on ASA 5520 code 8.0, which connects okay and I am able to ping VPN devices from my local LAN. However I cannot ping the local LAN from the VPN devices themselves. The ASA reports that No translation group can be found in th...

HiI've got a site running on an ASA5505 with a single internet connection and a single VPN tunnel back to the head office ASA5510. This site is trying to improve their available bandwidth as well as network stability. Is it possible to setup this ...

Dear All,we are having problem as end users have a lot of spyware/walware and have illegal proxy install in the lan.One of the idea is to deny HTTPS or "CONNECT" type http, at the "inside fwsm/asa" to any ip-base url destination. Since the ip-base ur...

Hello I have two ASA 5510 in active standby configuration and it workes quite fine. When a failover occures, the secondary unit keeps active, even if the primary is healthy again. Is it possible, to *automatically* make the primary the active one, if...

Will the CSA agent 6.0.0.220 work with Linux 32 bit and 64 bit Kernels??

In the following doc:http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/5505GSG.pdfPage 150 is not clear. In the example, they have test for local networks and 209.165.200.225 for remote. I am not sure what is tes...

I seem to recall having some issues with this a while back (like 5 years ago) and am curious if this is still an obstacle when configure on a ASA 5520.The ISP has given me a block of 8 IP addresses. Is there any trouble with PATing the IP addresses ...

what basic requirements are needed to allow multicast traffic through a routed(not transparent) 5505?outside users (source) are accessing inside (destination) server running multicast application.FYI, server's inside IP address uses a public IP (not ...

I am trying to configure an IPS sensor for the first time and need to configure an IP address. I am confused about what IP address to use. I am probably over thinking this, but does the sensor get an IP address in the same range as the GI0/1 IP add...

I am in the process of migrating web services from Checkpoint to ASA. Can I NAT the source address of incoming packets destined for a web server on port 80? The intent here is to be able to migrate a webserver at a time. NAT'ing of the source addr...

Hi!MY client has ERP servers and ISA servers in a single DMZ but now wants to place the ERP Servers on one DMZ (say DMZ1) without changing their IP Subnet and place the ISA Server on another DMZ (say DMZ2) and a diffrent IP Subnet. The problem is tha...

will the following NAT config on an ASA conflict?First part is for one to one NAT for inside address 172.16.1.1static (inside,outside) 192.168.1.1 172.16.1.1 netmask 255.255.255.255access-list outside_in permit tcp host 10.10.10.10 host 192.168.1.1fo...