Network Security

We have a requirement to NAT every site-to-site VPN host into a specific range of IPs. For example, A remote host is 10.1.1.200, we need to NAT this on our ASA to 172.24.202.1 through to the destination network.. This needs to be a 1-to-1 static nat ...

On the PIX/ASA, I know that traffic that originates from a higher security interface is considered outbound, but what about the return traffic for that connection. Is the return traffic considered inbound or outbound? Do counters classify the traffic...

I'm looking for configuration examples for the 65xx doing VRF-lite together with the fwsm. So far I haven't found any, any ideas?Thanks in advance.

Hi, A client of mine is looking at controlling user access to the Internet based on identity. I know Microsoft ISA and other proxy solutions would do. However, I am looking at leveraging their present installation of ASA and Microsoft AD to provide t...

I has tried migrating the PIX os from 6.2(3) to 7.2(3). After the upgrade relevant configurations has changed to the new command syntax. But i got an error with the NAT acl "access-list has protocol or port" and iam unable to go thro' the entire stat...

Trying to get a VPN tunnel up from an ASA 5505 to a Watchguard X1000 firewall at our colo. I'm a total newb at Cisco VPN configs, so I've probably got something monkeyed up...By the debugs, it looks like Phase 1 and Phase 2 both are coming up, but th...

Hi,Because same subnet are being in use between two sites local network. we have configured NAT overlap on IPSec VPN tunnel using ASA 7.0 and its working fine.But now on site where overlap NAT has been configured, users can not access internet.if we ...

Hi,We have a FWSM module in 6513 core switch which acts as the gateway between Vlan's.We have an exhange server in one VLAN and now we face a connectivity problem to this server on port 25 from other VLAN's. The port is open and no restrictions are t...

Hello,I've a Cisco ASA5510. I need to redirect the traffic originating from some IP addresses from inside interface destination port 80 to a proxy server, located in the inside interface, port 8080.For people who works with linux/iptables, I need som...

Traffic is fron Inside to Outside. When users from Inside connect to a host on the Outside with destination IP of 10.244.87.1, the pix should translated to 10.244.86.1. The documentation said you can use static for Lower to Higher security. This scen...

I am in the middle of a Checkpoint to ASA conversion and so far it's gone pretty well.My current problem though is that Checkpoint allowed for me to create an ACL that I could specify a group I created called RFC_1918_Group would not be allowed comin...

Actualy i can ping from inside to outside with ip 192.168.101.11, but can't ping from ip 192.168.101.123.I have also post the running config.Plz reply back asap.thanks