Network Security

It is my understanding that you can configure up to 4 DHCP servers on an ASA. So if an ASA was configured this way, (with 4 relays configured on the same interface) does the firewall go through the list of the 4 relays in the config in order? If the ...

I have an ASA 5512 with 9.2 as its image.  I am wondering, even from just interface to interface, are these NAT'd?    I have my Inside interface LAN of 172.16.0.0/16 on port 1, Security Level of 100 and my DMZ interface LAN 10.10.10.0 /24 on port 2, ...

If 2 ASAs are setup in HA w/ stateful failover enabled and a failover occurs, do all https connections need to be re-established?  The bulk of the connections would be via the outside interface facing servers, while a smaller set would be via OSPF le...

Hi,   Newbie question.   I have a 2960x with 3 VLANS (native VLAN is 1), already configured and working, in the sense that a PC on VLAN 1 cannot see a PC on VLAN 2 or 3. That is all I need. I do not need to do inter-VLAN routing. Nor do I want to use...

How to enable traceroute traffic flow for all directions & interfaces in ASA Version 9.1(7) ?    The reason was traceroute frm PC meet with *** time-out when it reaches firewall.

Hi,   I'm tryng to load asdm image on asa using tftp but it fails. I simply configured a port on asa with an ip and put my pc on the same subset. I can ssh to ASA from my PC but cant connect to tftp on my PC. I set wireshark but cant capture any tftp...

Hi All,   We are getting  TCP Reset-I and TCP Reset-O messages in the logs. We like to know which end is sending that and where the problem lies ?   Any help would be much appreciated.   Please find the attached logs.     Thanks.    

Good day everyone,   I would like to ask if it is possible to configure site to site vpn on an active-standby firewall reaching 1 peer but using two different interfaces outside1(isp1) and outside2(isp2). Our goal is to have site to site vpn on both ...

I have a management network for most all of my gear which sits in the same network as the management interface on my asa 5516-X interface. It's basically a simply L3 vlan that all the management interfaces on servers, network gear, etc connect to. On...

Hi All    I have been given requirements by out it staff that they need to configure a server with a public IP address , This would not have a NAT , Can any one explain if its possible to protect this server behind our firewall ? As this will be on t...

Hey Folks, were trying to move DHCP off of our Firewall right now over to our Server that is running DHCP. I take it that as long as we have identical scopes including the reserverations and changing lease times for our machines to get new DHCP lease...

Hi, We have ASA pair configured with Act/Stby. failover cables are connected via a switch as both units are located in two different locations. We have one issue when primary unit become active and reload the same box (primary unit) get always comes ...

 I am still leaning the cisco ASA and need some help with my tunnels. I was able to stand up and connect a VPN tunnel to my site successfully. The tunnel connects without issue and seem to be reliable in that it stays connected. One end is a Palo Alt...

Hello,   I have been trying to analyse existing traffic on an ASA and need to figure out active (not stale) xlate info. If I issue 'show xlate' , it gives me: Global 192.168.1.1 Local 172.16.1.1   So, how do I find out that if this entry  is actually...