I have an ASA 5505 that I am using to connect my contractors to via an inside interface, the outside interface is my private LAN. I have setup on our corporate Proxy server to allow traffic from my outside interface of my ASA to go to the internet w...
folksi have a perimeter router cluster with an asa cluster and another firewall cluster protecting my corporate networki'm hardening my perimeter at the moment but i was toying with the idea of using the perimeter routers in Classic IOS firewall mode...
Hello,can anybody tell me if PAgP is supported on PIX/ASA firewalls and if its possible to use EtherChannelling on firewall ports. Also, what are the limitations of this is at all possible.Thanks, Mark
I have pix firewall 525 with IOS Version 8.0(3)I have access-list applied both on inside and outside interface. Everything was working fine but today i m not able to ping firewall outside interface. only directly connected switches are able to ping f...
Hi, In MPF how many service-policy I can configure per interface.Please find theconfiguration in my ASA..class-map inspection_default match default-inspection-trafficclass-map imblock match any!!policy-map type inspect dns preset_dns_map parameters ...
Hello all,I apologize if I open a topic that had already been discussed,but I would need to know if the PIX 515 with 6.3 ver is capable of doing some basic url filtering such as youtube.com and yahoo.com .And if not what would be a suitable solution ...
I have following vlan groups assigned to FWSM in 6500 and it is production;firewall vlan-group 1 100,200,400,800Now I want to remove just VLAN 800 from the group. If I enter the command;no firewall vlan-group 1 800will it affect the traffic in othe...
hi,Query on SSL termination. Following is the logical path, The encrypted traffic hits the router -> hits the ASA IPS -> and then hits the VIP for load balancing via ACE. The SSL encrypted traffic should terminate on the ACE load balancer. However, t...
I have CSS11501 attached to one segment (A) on FWSM. Actual WEB servers are on another segement (B). Users are sitting on segement C.Users in C cannot get the screen over port 80 , when they try to acccess CSS. When we use anohter machine in the sam...
Dear All,We'r using FWSM with 2.3(4) s/wWe intend to do no nat-control. However, Version3.2 apparently can do this. How do we enable no nat-control or a similar function on v2.3?More requirement, ideally we would want no nat control on some dmz1s/out...
to a router/gateway on my LAN? Basically the PIX is the default gateway for my LAN. I have a router installed by a vendor that is a gateway to the vendor's network. If I add a static route to the PIX it allows the PIX to reach those subnets but th...
I'm trying to create an http bookmark that points to a location outside of our local lan. Any bookmark I create, the asa goes to the site, but it still shows that it's accessing the site through the webvpn first. Is there way to create a url that o...
