I having trouble configuring my first ASA I need to pass lpd traffic and the implicit rule is blocking me I attached my config. I am not sure if the problem is the access list or my nat.
I am currently working for a client that has a primary MPLS WAN, but is requesting to have DSL redundancy in case of MPLS circuit failure. They are firm on this. I have one site currently up with redundancy via VPN tunnel over DSL...routing with BG...
I have 5 different tunnels running on pix that are one way only meaning we initiate traffic to bring up the tunnels.I need to create another tunnel but a bidirectional one, that either end can send interesting traffic to bring the tunnel up. Is ther...
Hello, I've got a 5540 that firewalls my production lan enviroment. I monitor the asa with asdm and i am constantly watching that the cpu usage is over 80% even though there are not a lot of active vpn's. Does anyone have some tips on how to make wor...
I currently using an IPS ASA 5500 AIP . Because i am new to this product so does anyone have any baseline for configuring of this IPS. Can share the knowledge. Thanks
We are building a new setup, this new setup entails bundling two new firewall service modules to produce 10 Gbps.Currently, we have two distribution switches ds03 and ds04, in each of those distribution switches , we have two FWSM and one ACE module ...
Hi AllWe have a site to site tunnel running between two sites SiteA and SiteB from both the sites we are able to ping devices internally in the network but not to the inside interface of the ASA.I have enabled the management interface as the inside i...
I have the following connectivity.PIX A, PIX B and PIX C is connected to internet. There is a VPN tunnel from PIX A to PIX B and another tunnel from PIX B to PIX C. VPN tunnels are configured and from A-PIX network I can access B-PIX local network. I...
Hi Techies,I have been assigned project for setting up the security contexts on PIX firewall.Please see the below tech details:I have created two contexts i.e. Admin & CustA. I have decided to share the Outside interface between two contexts. I have ...
I'm interested in trying out version 8 on an ASA - does anyone have any comments on how much risk there would be in upgrading a remote ASA to ver 8 from 7.24? I have three standard site to site VPN's; two to PIX's running 6.35 and one to a router run...
Hi. I want to create a ipsec vpn between 2611 and pix ( pix is not on my side ). I have this configuration on 2611.crypto isakmp policy 10 encr aes 256 authentication pre-share group 2crypto isakmp key xxxxxxxxxx address y.y.y.y!!crypto ipsec transfo...
