Network Security

hi:In a ASA 5520, I can route diferent traffic to the outside?I mean, if a VLAN is one it goes to the "outside" and for puntual IP's or VLAN the traffic it goes to the a sub-DMZ.Thanks. Regards

Can somebody explain to me how to configure this. If you have an ASA for your firewall and a user on your internal network has a VPN client where they connect to a remote server on the internet how to you allow IPSEC pass-through so the internal user...

is this software compatible with either PIX and ASA?

Hello Can PIX 506e return ICMP port unreachable on Linux traceroute with UDP data gram, and if somebody knows how, can you make an example of the access-list how it should be written to allow this response?

Hello.Basically this is my setup.DMZ - 10.10.xxx.xxxPrivate - 192.168.xx.xxxOutside - 66.38.xxx.xxxI have my new domain controller on the Private network where I house my database servers. I am trying to get my webservers from DMZ to authenticate thr...

Hi, I have been facing ipsec vpn tunnel issue on upgrading my pix 535 from 6.3(5) to 7x .I am having 20 odd site to site vpn tunnels configured on my pix. Problem is that all of sudden data stops transferring through tunnel. If I check the status of ...

I have a basic conceptual question. If an ASA is using dynamic routing (OSPF), has multiple physical paths to the Internet (for redundancy), and a l2l VPN tunnel established to another site, does it look to the routing table prior to encrypting the p...

Hello,I have configured an ASA 5510 at our data center. The problem I am facing is that in the network range of 0 to 255 there are servers with /24 masking and these are already routed by the router. I want to deploy the ASA firewall only to 6 of the...

Anyone know how to do this? confreg through rommon does not set it anymore.

Hi,How many additional slots can be used in ASA 5520?Means can I use one 4GE SSM and one AIP SSM along with the default module installed in slot 0 of 4 gig ports?Thanks in adv.Souvik

I have a pair of 5520s in production. Due to a licensing mismatch the HA was disabled recently. Until I get that resolved, is there a way to do a manual failover somehow in the event that the primary ASA dies? i looked for a link to some docs but did...

Hi all, is there any reason why i cannot tftp my config from my asa via a vpn tunnel to my remote site, do i need to put in an access list for this ?

Hi,I am faccing the following problem.When I ping the inside interface IP the following result ,please help me to resolve the issue.Reply from 10.1.1.100: bytes=32 time<1ms TTL=255Reply from 10.1.1.100: bytes=32 time<1ms TTL=255Reply from 10.1.1.100:...

I'm looking for a way to monitor the number of site to site vpn tunnels on an ASA5510. There is an OID for the global number of IPSec tunnels but that includes the remote access tunnels, which I don't really care about those dropping.Anyone know of a...