Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi, I'm using an ASA5505 (8.4(1)) and would like to block port 80 on a specific host in the LAN so machines in other remote LANs connected via VPN can't access this port on the host. Devices in the local LAN should have access to this port on the hos...
Hi,I've been trying to configure the threat-detection scanning-threat shun feature on my ASA5510 running 8.4(2) for some days now. From searching the support community I can see that I'm not the only one having a problem with this feature. The proble...
Hi,I'm experimenting with policing FTP traffic from outside interface to inside ftp clients on an ASA5510. I am able to police active-ftp connections by using ACLs which monitor port 20 & 21 and then using MPF. This is easy enough. Passive-ftp is pro...
Hi,I just upgraded an ASA5505 running 8.4.1 to 8.4.2 after noticing that I was experiencing the ssh bug described here: https://supportforums.cisco.com/docs/DOC-16513. Now every time I reload the unit I get the following message on the console:Readin...
Hi Jouni,I went the route of creating a VPN filter access-list. I used this walk through: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtmlPrecisely what I was trying to do. Thanks for pointin...
Hi Mike,Ok, this makes sense. I was scanning the public IP address of the box. I'll redo the scan trying to target something inside and see what happens.Thank you for your reply.Joel