About ejensenscs

ejensenscs · 02-14-2012

I'm trying to set up a router with 2 WANs and use SLA to failover the traffic. There is no static NAT, just the dynamic NAT(pat). I want to have traffic bound for one destination use WAN B and all other internet traffic use WAN A. So the SLA is us...

ejensenscs · 09-02-2011

I'm wondering if anyone has found a way to detect (and then effectivly block) repeated failed RDP login attempts. I assume it's difficult because these are legitimate connection attempts that we don't want to block normally. We run many terminal se...

ejensenscs · 05-26-2011

Hello,I have multiple customers and servers behind my ASA5510s. After moving a new customer with an FTP server behind the firewalls, they immediatly had issues with customers connecting to their FTP server. I had the default inspection rules runnin...

ejensenscs · 04-14-2011

We are looking at getting a pair of ASA firewalls (probably 5510s) with IPS modules. I plan to configure them in active/standby as our throughput needs don't exceed the capacity of a single 5510. Currently we are running a pair of PIX515(non-E) in ...

ejensenscs · 03-20-2012

I'm seeing the same results you are, I'm getting some but not all of the attacks. I think there are different methods of the attack and we are seeing only 1. My next step is to try and capture some of the attack while it's happening, then go throug...

ejensenscs · 02-15-2012

Nicholas May! Scripting was the answer, I don't think I even knew that existed! I have a working solution, when the SLA takes a route down or out, the NAT table gets cleared and traffic gets reestablished with changed routes. Then when it comes ba...

ejensenscs · 02-14-2012

Yes, NAT outside is on both interfaces. I think everybody is missing the fact that this works in everyway I want it to, but requires a small amount of manual intervention (getting on the console and issuing the clear ip nat trans * command). If ...

ejensenscs · 02-14-2012

If I take out the route statement, my traffic goes all on the WAN 1... which defeats my whole purpose of the project. I need more than just the primary wan failover, I need the second wan to failover to the primary wan if that goes down also. It ...

ejensenscs · 02-14-2012

The route statements disappear from the show ip route output correctly. The traffic routes correctly, the ip SLA is working just fine. It's the NAT part that is sticking.... Everything works after fail or failback as soon as I issue the clear ip ...

Member Since	‎10-17-2006 02:41 PM
Date Last Visited	‎02-03-2023 02:07 AM
Posts	16
Total Helpful Votes Received	16

User Statistics

User Activity

IP SLA to perform failover, but can't fail back because of NAT entries?

Help detecting and blocking repeated RDP failed logins

FTP inspection problems

ASA failover with non-matching hardware, IPS module

Denying Brute Force RDP Requests Using Cisco IPS

Re: IP SLA to perform failover, but can't fail back because of NAT e

Re: IP SLA to perform failover, but can't fail back because of NAT e

Re: IP SLA to perform failover, but can't fail back because of N

Re: IP SLA to perform failover, but can't fail back because of N