I am trying to create a PCI zone inside a network. I am using a 1941 with security and ZFW to restrict traffic. PCI can go out to ASA and across to LAN. LAN can go to ASA but not to PCI, finally ASA can go back to both PCI and LAN to send natted traf...

I have a client that is trying to use an ISP hosted web filtering and content management gateway, the ISP wants to use and L2L ISPEC VPN from the site to their gateway to control traffic. We got the tunnel up today with a test ACL for test client sid...

I need to NAT the DMZ vlan to a non interface IP for internet access.I was thinking of doing a static commandstatic (DMZ,outside) 192.168.1.1 1.2.3.4 255.255.255.255or if I need to do a global nat?global (DMZ) 2 <external IP>nat (DMZ) 0 access-list N...