Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Silly, and embarassing question.On the ASAs, is the whole principal regarding flash memory, RAM and NVRAM the same?Meaning, like on switches and routers, the Flash memory holds the OS, the NVRAM holds the starup config and the RAM loads everything an...
Hello everyone. Have, hopefully, a straightforward question here.Brushing up on my ASA skills (been awhile) and have been going through my notes and just need a little clarification on some things. More or less, just want to make sure I understand a ...
I have recently started work for a new company and have taken over the ASA 5510 Firewall rules. I have worked with them a bit in the past, but not enough to say I am very strong or a master.Anyway, after taking a look at the firewall rules, I was hor...
I have a ASA 5510 currently running with a configured subnet from our ISP. Our ISP issued us an additional subnet for us to use.Is it possible to add this new subnet to our ASA appliance somehow?We need to IP address to map to machines that are in ou...
Alright...powering through ASA 101. I just want to confirm THIS will work. I need to create a object-group with some IP's so I can make my ACL list more readable.Here it is:conf tobject-group network VENDORdescriptiong Vendor IP Address rangenetwork ...
Thanks Jon.That is a excellent explanation. I was having a hard time getting my mind wrapped around it and what was included in both tables, but that makes perfect sense.Many thanksCheers,TCG
Thanks Jon. I appreciate the help.Building upon my initial question, in regards to the XLATE and CONN tables,can it be said that the XLATE table for each protected host that can participate in connections? The XLATE is a little fuzzy to me.The CONN t...
Got it...that makes sense.So in a nutshell, as long as the ISP has taken care of their part by configuring that block of IP's on the router, and I configure things properly on ASA (using static) then everything SHOULD be good to go.That correct?Thank...
I think that should be ok. It is kind of odd (just stepped into this job), but the ISP actually controls and configures the router on our end. From what I have been told, they have already configured the router with the new subnet.They have given me ...