Network Security

Hi all,I have a question regarding IPSec site to site VPN.There is an internal network, say 10.1.1.0/24 which NATs to global address 5.5.5.5 on the Outside interface. The remote network is 20.20.20.0/24I want to NAT to the global address then send th...

We have a remote office with a 5510, and we are trying to access the asa 5510 via the ip address configured on the inside interface (the interface facing the renmote office, not the wan). We can access the outside ip address fine, but cannot access t...

Hello all,I just wanted to know a basic answer I guess... does the ASA5510 only act as a routing device or can I deploy it within a network already having a router as a gateway?I already have a network setup with around 100 hosts (out of 254). I have...

I have a private web server behind a PIX firewall. Is there a method of having the PIX require inbound authorization (UID and Password, credentials stored on an AAA server or in the local database), prior to allowing a connection to the protected web...

Using a pix501, have servers on the outside interface that need to be able to access servers on the inside interface. I can ping from the inside out, but when attempting to ping from the outside in, getting a 305005: No translation group found for ic...

I'm new to the world of cisco. (asa 5510). I have a rack at a data center that has multiple IP addresses - 254.16.220.1 thru 254.16.220.62 (obviously not the acutal addresses.) I need to integrate it slowly into my rack, pulling one server behind it ...

I have a pix v7.0 with nat control disabled. The command "same-security-traffic permit inter-interface" is present. I have ACL's applied to all interfaces, but can someone confirm that this command does not override the ACL's applied to the interface...

Hi,i need a small ASA analyzer that can tell me each IP usage in my network, i had a situation today in which there is a high traffic usage from my office and i couldn't know from which pc , i did show conn but i couldn't know who this pc was.thank y...

Hi @all,i've a l2l vpn between 2 pixes [7.2(2)]. Now i'm trying to limit the vpn traffic to telnet (biderectional). I've tried it with the acl:pix1:access-list 111 line 1 extended permit tcp host 192.168.178.11 range 1024 65535 host 10.5.1.2 eq telne...

Hi,We have pix 535, 6 interfaces, active stanby mode.In that 2 of the primary pix interfaces unable to ping from Secondary pix and vis versa.In that particular interface status are normal. Even i have checked with rebooting pix also.but i am finding ...

Hi guys,I have Cisco ASA-SSM-20 deployed INLINE.I can cut any traffic without any problems except SSHv2 over HTTP or HTTPS.Implementation ? - http://dag.wieers.com/howto/ssh-http-tunneling/Easy, you can make an HTTPS tunnel, then SSH over HTTPS and a...

What is the use of having same-security-traffic permit intra interface when the traffic between same interface hosts are allowed by default.

i create remote vpn on asa5520 to inside its work, i can use resource (server) in inside ok but i can't ping to firewall's interface inside. and when i add static nat on asa5520 when i remote vpn it's cann't work i cannot use resource(server) in insi...