Network Security

ASA5505 Losing Internet Connection

I have a Cisco ASA5505 that is dropping it's internet connection at random times. I can clear it by cycling the power on the ASA but with our weekend VPN users this is killing us. I have a copy of the config below and would appreciate any feedback. W...

http filter use QOS

Hi,all:my config like this:Class Map match-all 1 (id 3) Match protocol dnsClass Map match-all 2 (id 4) Match protocol http host "*cisco.com*"Class Map match-all 3 (id 5) Match not class-map 1 Match not class-map 2Policy Map 1 Class 1 Clas...

Police Service-policy individual or total?

Hello.If i set a service policy for the ACL match Any source and Any destination to 10Mbps does that mean the total is limited to 10Mbps or the maximum for each individual connection is limited to 10Mbps?Thanks.

ASA active/standby failover configuration

Hi every body,I have configured my ASA 5520 (Software version 8.1) as active/standby failover and it works very well, however i want to perfect my configuration. regarding my network topology, i would like that the primary device will be always activ...

Resolved! Same Service policy global for differnet class map or policy map

Hi,I know it is not possible to two different service policy on gloabl interface.Wanted to know if I do have defafult Class map i.e class-map inspection_default and policy map global_policy.It is inspected under service-policy global_policy global....

traffic count on ASA

we have a 2-server cluster with a virtual ip and this server/s connect to internet via an ASA firewall. Rules to allow these on certain ports are configured.i dont see any counts on acl with virtual ip, but ones with physical ip do show traffic.Is th...

Resolved! the case about the led of asa series

i confuse about what does the different color of led mean?like interface led , active , power, vpn ,standby.please help me to understand it , or maybe you can show me some decument about it.thanks a lot.

Voice traffic is dropping thorugh ASA

Hi,Running code 8.0 on ASA 5510.All internet through internal and DMZ perfect and mail server extra are working perfectly fine for me.All ports are opened from inside and dmz.Now voice facility imlimented with EPABX and digital phone.We are able to c...

Zone based firewall and VPN

Hello,we are trying to migrate from CBAC to ZBF to ease our firewall management. We translated all the ACLs to ZBF and it was a breeze. Everything went fine except one thing (the VPNs stopped working) which I'm hoping someone with more experience wil...

Resolved! How to configure Firewall to permit only one http site

Hello,Please how can i configure my firewall to only permit only one http site?Example I have a domain name www.sample.com. I want all my inside user to access only this site.thank youEdwin

Resolved! Query regarding message class in Syslog

Hi Halijenn / expertsI have a query regarding syslog messages and wanted to send only the commands to syslog which are run by user in configuration mode .Hence please let me know what is exactly meant by the command "config " if i configure the below...

Resolved! ERROR: % Incomplete command

Hello,I have an ASA 5505 that won't take the static or global commands for NAT.ASA5505# conf tASA5505(config)# staticERROR: % Incomplete commandorASA5505# conf t ASA5505(config)# global ERROR: % Incomplete commandSorry I have very little Cisco firewa...

Setting up a honeypot on an ASA 5505

I was wondering if I could get a bit of configuration advice to add a honeypot on my 5505 (10 user base license) in my home environment.Currently I have default vlans 1 and 2 setup for inside and outside. I would like to set up vlan 3 with restricted...

Access list and remote printing

Dear allMy organization has a leaased line internet that is connected to router , then asa 5510 .From ASA 5510 it is distributed to LAN.NATING is done in ASA.The IP range is 120.125.51.128/27.The router interface IP is 120.125.51.129.The out side int...