Network Security

Is there any backup option on the Asa 5505 firewall? Or any backup option for the asa 5505

Hi.This is probably a really simple one but can you ping the outside interface of a PIX/ASA from teh inside network?It seems to be blocked or disallowed by default, but does anyone know how to get around this.Thanks.

Hi,I just need someones advise on the adding a NAT exempt rle on my ASA 5520.If I add an exempt from an IP to another IP it works, if I add a NAT exempt for a group name to a group range it won't work.I am using the ASDM and I have created a group fo...

Dear all,i spoke for a friend which problem i heard in the last days.he installed a new location and the vpn is woking well, from the cleints in the local lan he can connect the tftp server in the headquater. but when he is on the asa via ssh (connec...

Dear All,I would like all of you to help me to solve the problem as below:On ASA i had Outside,Inside and DMZ.i had one webserver in DMZ and i had 2 application server in Inside( one primary and other one Bakcup).so i want to allow some port from DMZ...

we have a main site that contains (1)CAM and (1) CAS and 250 users. we have 5 remote sites that connect to an ASA 5520 via DSL point to point VPN connections. There is no internet at these sites locally, they all access the internet through the main ...

I am trying to find out if CSM version 3.2.2 will support Sensors running 6.1 and up ?? At this time CSM 3.2.1 cant be used to update sensors to 6.1 and up.Thanks,

Hi all,I think i know the answer to this but i will try anyway, i support a pix 506e ver 6.1(4) (yes i know its old), which has been fine for what it needs to do for the last several years. However i now need to open a range of ports to a host on the...

At headquarters we have 2 routers. We have a corporate router connecting 10 sites via a public MPLS network for core services. Any traffic not destined for any of our sites gets routed to our internet router.We'd like to take a site off of our public...

I have a ASA5505 with mostly factory default configuration. Its license allows only two vlan interfaces (vlan 1 and vlan 2). The default config has interface vlan 1 as inside (security level 100), and interface vlan 2 as outside (security level 0 and...

I'm re-posting this, because it seems to have died out on answers. I've also attached my configs:Please, I've been working on this for a few weeks now, and have had to learn everything pretty much on my own, because no one can seem to give me an answ...

Hello, Have a PIX 515E with a subnet connected to the DMZ port. All servers on the DMZ port, lets say 192.168.1.0/24 network have arp entries to any server on the 192.168.1.0 network with the MAC of the PIX port. Does this mean that and intra-server ...

I am looking into getting a 5505 for a client who has two ISP Internet connections. Do I need the "security plus" license since I need three FULL VLANS (ISP1, ISP2, and inside LAN) and not the two + one-sorta-functional VLAN that comes by default on ...

I'm monitoring our Cisco ASA via SNMP.So far I found :- Total number of RAS sessions : 1.3.6.1.4.1.9.9.392.1.3.1.0- Number of IPSec VPN tunnels : 1.3.6.1.4.1.9.9.171.1.3.1.1.0- Total number of SSL Sessions : 1.3.6.1.4.1.3076.2.1.2.26.1.2.0I'm looking...

I have 2 unit ASA 5520 with AIP-SSM-20 for front-end and 2 units ASA5520 with AIP_SSM-20 for back-end.I also have 2 units catalyst 6509. How should my design looks like.