Network Security

Does anyone know if the ASA has a built in web proxy like competing products? Basically, I want to proxy all internal users and authenticate them against Active Directory. Based upon their group permissions, I want to be able to configure what kind...

I asked this question before and thought I had it straight, but having tried the suggested solution it is not working.Is it possible to allow Cisco VPN clients access to only certain internet IP addresses through split tunneling? I have tried using ...

If you have a concentrator with multiple active L2L tunnels, how does it know which tunnel to use when sending return traffic back to the remote end? The remote networks list? How do static routes on the box influence this?

Hi,I have a very simple config : 1x PIX 535 firewall running 6.3 and 1x 2960 ethernet switch. I am trying to get dot1q trunking working between the two, and utlize VLANs through one single physical connection. This is easy right ? But i see thousands...

Urgent helpOur ISP have black listed us due to them recieveing lots of SMTP traffice from us.We need to find out the source of the issue from the inside sending SMTP traffice to outside.Is their a way to capture smtp traffice on the ASA. and also who...

After upgrading a client from a PIX 501 to an ASA 5510, I'm having problems with the VPN and specifically the hostnames for the internal devices.Once active, the VPN on the ASA works perfectly fine by IP, but not by hostname.If I edit the hosts file ...

I find so many events listing on the sensor that report numerous events which list the source and/or destination as 0.0.0.0. In this event, the “attacker” is a known and permitted host. However, my ACLs do not permit it “any”. I have no id...

We configured multi-Context on 6509 FWSM. We have issue since we change the IP address of one vlan interface which is assigned as the Outside int of one context. It's interesting that ASDM shows this Outside int is down while CLI shows it's up. I hav...

Hi,I am using ASA 5580 with software Version 8.1(2). Could it be possible to access the NATTED IP address and also the physical IP address at the same time from the host.

Hi All,This is a strange problem I have come across cisco ASA. Let me know if any one has experienced or is this known issue.A tunnel configuration is set for site to site and is working fine for many days.Case 1. I disconnected the cisco asa from th...

Can I map the host part in a dynamic NAT translation "one to one"?I am separating two private class C networks with a PIX 525 firewall (v7.0).I would like the last octet to be preserved during the translation without entering 254 static statements.E....

There is a default Perfigo root CA certificate that comes with the installation of NAC, I have now purchased a valid Verisign CA cert, when i import the root CA into trusted CA's its accepted, however when generate a cert request and get it back from...

Hi,I need to manage an ASA 5510 by remote using a Cisco vpn client.I have a 7.2(1) an it's running. I logged into the vpn and ssh I can connect the inside IP of the ASA. I cannot ping the inside IP!Trying the same scenario on another 5510 with ASA 7....

Hello There,I have to sites to configure VPN connection. Each have a Cisco 1721 router. Can anybody help with a VPN configuration samples or guides for this? ThanksDaniel