Network Security

Hi guys,I have Cisco ASA-SSM-20 deployed INLINE.I can cut any traffic without any problems except SSHv2 over HTTP or HTTPS.Implementation ? - http://dag.wieers.com/howto/ssh-http-tunneling/Easy, you can make an HTTPS tunnel, then SSH over HTTPS and a...

What is the use of having same-security-traffic permit intra interface when the traffic between same interface hosts are allowed by default.

i create remote vpn on asa5520 to inside its work, i can use resource (server) in inside ok but i can't ping to firewall's interface inside. and when i add static nat on asa5520 when i remote vpn it's cann't work i cannot use resource(server) in insi...

Hi,Where is the best place to position a 6500 switch with FWSM module in Routed Access LAN (Layer 3 to the Access Layer).We have a layered network with Core/Distribution/Access Layers. The core consists on 2 x 6500 with FWSM+IDSM, dist consists of 2 ...

Hi, Kinldly provide me the command and step about how to take image backup from Pix v 6.3?.

Hi, all!Can anyone help me with it?I am trying to conf. so that the inside and outside client can connect to the http server in the DMZ zone I can ping from the http server to the dmz interface and back to the http server.Her is the config I have add...

Hello fellow ciscoers,My question relates to the use of the netmask command within the PIX/ASA. When used does this only translate the appropriate bits in the original ip address to the desired NAT address? For example:If configure as follows:static ...

I have a Java application over SSL that is not performing well outside of our FWSM, and in fact hanging completely in many situations. When I run the application inside the FWSM with Wireshark scanning the traffic, everything looks hunky-dory. Runnin...

Hello -We have an ASA running EIGRP on the inside interface. We have a static route to the internet out the outside interface.We also have numerous VPN subnets with RRI enabled on this ASA. We want to redistribute the static RRI routers into EIGRP, b...

Running version 3.1(5) on FWSMIs there a way to allow TLS with SMTP through the firewall without disabling SMTP statefull inspection globally?

We have a vpn connection from a remote site to our main site/network. At the remote site, they get all their network drives that are on internal servers, but can not map a drive to a server in our DMZ. I've worked with Cisco tech support on this but ...

Trying to pw crack a LD 416. Does anyone remember how to?

Hi,I found a route-map command in the ASA v8 command refernce, it has the same structure as the route-map in router. does this command function like the router one or it has different function.