Network Security

i have an ASA 5500 firewall and i need to ping from hosts in inside interface to outside interface

We are experiencing an issue where once or twice a month our DSL connection takes a hit, and then the ASA5505 device will not function. In the past the only way to resolve this has been to shut the device down and then bring it back up about 10 minu...

Does the below config allow (just from a NAT perspective)hosts on the 10.1.1.0 subnet to access servers on the 192.168.1.0 subnet?It this NATing the FTP interface to the 10.1.1.10 address?if so, would this over rule any access-list that was applied i...

Hi folks.I'm doing an WebVPN pilot on one of our ASA's (running 7.2.2). Everything is working fine, but I've been asked to restrict access to users that are members of a certain Active Directory group (lets call the group "VPNTEST")Right now the ASA...

We have ASA 5510 with standard port use: Inside, DMZ and outside(T1). Leaving Eth0/3 unused. We are considering getting DSL for a redundant Internet connection, could we use Eth 0/3 somehow for failover?Or is this better suited for a different device...

With CSM 3.0 I was able to administer global tuning by logging into CSM, choosing Management Center, Configuration, Global and I could begin.In 3.1 where Management Center used to be I now have Auto Update Server. Of course Auto Update Server doesn'...

Hi,I have one question regarding signatures update, are the Cisco new signatures include the new updates plus the old ones or just the difference between the latest update and the previous one?If I have an IPS which has never been updated for a year ...

Hello everybody,I have a remote 871 (see attached config) connecting to a head end 3030 doing ezvpn-network extension mode to corporate. I would like the remote to be able to access a couple of servers on the provider's network on 172.30.1.0/24 outs...

I have a fail-over pair. I can get ssh/https into the primary but not the secondary. I can only get into secondary after taking primary off-line. There's no VPN on the box. Could someone please give me some hints why I can't get to the secondary?

I am aware how CBAC does work , please look at the figure below (step 2) :http://img484.imageshack.us/img484/7679/cabcib1.jpgIn step 2, he says: " CBAC creates a dynamic ACL allowing return traffic back through the firewall "Does he mean by: " CBAC c...

One of the rackmount brackets that comes with the ASA5500 series has a forward facing plate that sticks out beyond the front of the ASA. I have guessed that this is to take the second cable management arm, but this seems rather useless. What exactly ...

Hello,i have some problem with NAC ASA and CTA work.Try to configure ASA to work with NAC.Conditions:VPN is connected and work fine (ping from local comp. to inside network via VPN)CTA is installed and property work with wired 3750 (in NAC-L2-IP NAC-...