Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Hi guys,what is the difference between static nat & alias?is it that in alias ip addresses can be in any interface?just i cant no understand when to use alias command? and why?Regards,
Is there a way I can allow connection from inside the firewall to one of my public IP which has a static NAT?I connect out from internal and want to connect via port 80 external on a second IP mapped back to an internal address? Is it just a case th...
Hi guys,I've 2 core switches with 1 FW Module in each switch..i want to make a failover configuration between the two FWSM [Active/Passive], so if one goes down other will work..there is any config guide or document i can follow?or kindly let me know...
I have a network where I use two separate ISP connections on different locations within the same building. I would like to install an ASA 5520 to each connection as we don't have any firewall at the moment. Some of my traffic from one segment to the ...
Dear all,I am facing strange problem with 6500 IDS module.Management port of IDSM is up and Data port 2 Operational Mode: down.When i check traffic on this port it is one way only.I can able to ping IDSM management IP but when i try to telnet it give...
Hi,I have two 6509 each with FWSM module. we will configure this in active/standby. We want to configure 10 vlans for inside and 5 vlan for outside will connect to my mpls. internet gateway cloud. I don't want any restriction between my inside vlans...
I wonder if anyone can tell me the best way to configure ISP redundancy like can be done in checkpoint, not to confuse with device redundancy Many Thanks Mark
Hi,I have a Cisco vpn client for connecting to clients network. The client gets authenticated and is able to connect to VPN. But none of the network applications like remote desktop are working.I am able to telnet on 3389 for that IP but remote doens...
Looking at the diagram, is it possible to ssh from the WinXP machine to both Eth0 (IP address 192.168.2.2) and Eth1 (IP address 192.168.3.2)? If it is possible,how do I go about doing it?Thanks.
Hi,<br /><br />I have a requirement to create a new group policy and a new tunnel-group and apply it to a webvpn user account<br /><br /><br />The web vpn is working fine without any issues when I give a new name under Group Aliases and URL<br /><br ...
Hi,I have some questions about updating my sensor with CSM 3.21-can i use my csm server as a ftp server to put updates such as signature update or image update and then configure the module to poll the updates from there?2-is there some how automatic...
I came across this syslog message while troubleshooting an access issue and real-time log viewing. This syslog message looks serious, but how and what do you do?Syslog ASA-2-106017 : Deny IP due to Land Attack from IP_address to IP_address.The land a...
Is there a way to drop all traffic in one particular IP range? We have a large amount spanned to the IPS which cannot be changed, but there is one particular IP range that I don't want to monitor. Can I drop this range at the IPS?Thanks
