Network Security

Hi, Have a Cisco ASA - lots of IPSec VPN's to lots of places. The allowed service in the Cryptomap was IP to all - we decided to narrow this down to SSH, RDP etc. I created a group for the ports and added to a test VPN - all worked well. I then appli...

Hi,we are running two failover pairs of asa (5510, 5505) in two different locations in active/standby configurations.Is it possible to access the inside ip of the standby unit via vpn terminated by the active unit? It's only for monitoring.With our c...

This is an ASA access list question. Why am I not able to ping the host in the DMZ from the host in the OUTSIDE? I have ACL's configured to allow ICMP, so not sure what I'm missing here.  

   TEST PLAN FOR TACACS+So we are implementing tacacs on all our firewalls in the next week or so I have some doubts so that I don’t lock myself out.I First thought most cases of users locking themselves out was due to the authorization part.So here ...

Hi, we've a Cisco ASAv licensed in Permanent License Reservation mode. We can't use standard Smart License or Satellite communications way. Basic license was inserted into Smart Account and it was installed correctly, using License Reservation wizard...

I'm using ASA cisco 5520 with ASA version 8.0 and ASDM 7.1. My network only set DMZ and outside.DMZ: 172.16.77.1 and Mail server: 172.16.77.100.Outside (PPPOE): IP public get from ISP (and I have 1 IP static: X.X.X.27).I'm browsing a lot of pages on ...

Hello - I need some config help with deploying a Shoretel VPN concentrator in my network.  Per the documentation, one leg would be connected to my 2110 on a dedicated DMZ port, the other leg would be connected to my LAN.  The config on the 2110 would...

What does the no NAT look like on the ASA for rfc1918 traffic to egress the outside interface of the ASA to an upstream router that does NAT?Outside interface of ASA and inside interface of router are Public registered IPs that belong to me. nat (ins...

I would like the procedure for upgrading the ASA 5585-X FirePOWER SSP-10 (Firepower / Asa / ASDM)

Hello All, A am a bit new to SIP trunks with the ASA. I wanted to see if someone could give me a best practice review? Using a Cisco ASA5510 version 8.4(5) and we have an internal Mitel Phone server. SIP trunk is being handed off by Comcast.These are...

Hi community, I'm looking at blocked Connection Events (Analysis>Connection>Events) on the FMC. Is there a way to only show only unique IP:Port -> IP:Port combinations? In other words: I would like to remove repeated connection events.   It would als...

Hi, The ASA has Security Plus license and I config below two vlans with same security level, why they can't ping each others? ASA Version 9.2(4) This platform has an ASA 5505 Security Plus license. interface Vlan1nameif insidesecurity-level 100ip add...