About Mokhalil82

Mokhalil82 · 07-26-2022

HiWe have a pair of ASA 5516-X firewalls in the DC. In 2021 we did not renew the support contract as we were migrating services off the firewalls. However there is VPN still on the firewalls that we cannot move due to 3rd party constraints so are lo...

Mokhalil82 · 08-24-2020

Hi We have 2 DCs both with HA pair of ASA5516-X firewalls. I use the management interfaces for management purposes. I was trying to configure logging to a syslog server. Syslog server IP is 10.10.10.1My logging config is:logging host management 10.10...

Mokhalil82 · 08-21-2020

Hi We have 2 DCs both with HA pair of ASA5516-X firewalls. I use the management interfaces for management purposes. I was trying to configure logging to a syslog server. Syslog server IP is 10.10.10.1My logging config is:logging host management 10.10...

Mokhalil82 · 02-18-2020

Hi I am in the process of reconfiguring all the outside access rules and NATs as we are migrating to a new public IP range. My question is about the best practice when configuring the NAT and access rules. I want to only use manual NATs. 1) Should th...

Mokhalil82 · 11-28-2019

Hi I have a single ASA running in context based mode. So it has the system context and a Firewall context. I want to attach a secondary ASA to this to run a HA pair.I understand the configs required if the ASA was not in Context mode. My question is,...

Mokhalil82 · 11-28-2019

Just tested, command works in CLI, only in ASDM seems to show UNKNOWN for the input and out interface, I have tried the same on a different ASA using the same ASDM server and do get the input output interfaces correctly, so only on this firewall in d...

Mokhalil82 · 11-15-2019

Thanks, the PSK was the issue, I changed to key minus the special characters and it worked a treat.

Mokhalil82 · 10-15-2019

We are just accessing 3 resources over https, ssh and rdp using the same destination IP. The 3rd party will do NAT translations based on the destination port number we are using, their NAT will translate to the specific internal IP address.So the ide...

Mokhalil82 · 10-09-2019

Thanks MariusSo as I understand it then, the VPN filter only filters traffic incoming on the VPN which is why we define the source as the remote site. If using a port group defined as destination ports in the group ie service-object tcp destination e...

Mokhalil82 · 10-09-2019

Hi There is some confusion form me on this, on examples I have seen state the source is always the Remote Network and the destination is the Local Network. My port group is also configured as:object-group service SITE-PORTSservice-object tcp destinat...

Member Since	‎11-26-2014 11:24 AM
Date Last Visited	‎08-02-2022 09:06 AM
Posts	530
Total Helpful Votes Received	35

User Statistics

User Activity

ASA 5516-X Support Contract

ASA Management Routing

ASA Management routing table

ASA NAT Best Practice

ASA HA Pairing - Add secondary to context based firewall

Re: VPN Packet Trace interfaces UNKNOWN

Re: IPSEC VPN Debugs

Re: IPSEC VPN ACL & NAT-T

Re: VPN Filter ACL

Re: VPN Filter ACL