I have a scenario with a load balancer that has connection into the networks behind my ASA's inside and dmz interface. We'll be migrating all the public facing websites currently sitting on the inside to the dmz, but the problem is that I want to mo...
i, on the ASA 5505 is impossible configure on the static PAT more ports but also is impossible to use Service Groups.I have this situation:- internal mail server that use pop3 and smtp port, the IP Address is 192.168.1.80- two public IP address, one ...
Hi Guys, we are installing a new web server in our environment. Current web server is on Windows 2003 x64 R2 with IIS6.0 . The default www page is abled to view internally but not externally.We used ASDM to configure the NAT and open ports 21,80,8080...
Folks,I'm intending to upgrade an ASA5520 from 8.0(3) to 8.2(2). The following document discusses incremental upgrading of software:https://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008067e9f9.shtml#asdm6.x1Under all rea...
Hello everyone,Can anyone tell me if the Content Filter module on the ASA can be tied into a Novell Directory structure so that we can create different levels of filtering for different groups an/or users?Thanks in advance!All replies rated.
Hi AllI have an FWSM pair (stateful failover configured as active/standby) running 3.1(4) and need to upgrade to 3.2(13). As always, the powers that be want no down time if possible but I am not sure that the modules can continue to talk failover if...
Hi,Iam going through OOB NAC deployment and i have a question about the CCA agent that will be persistent on the clients machines , if a client leave his work with the laptop that has the CCA agent and will use it in home or any different network , w...
Hi. I've been tasked with making some config changes to a Pix 515e owned by a new customer. My query is that one of the physical interfaces (ethernet2) appears to have 2 VLANs set up on it and I've no experience of VLANs on Pixes (in truth, very litt...
Greetings.The idea: A client (camera) on the LAN should be able to connect to WAN IPs and WAN IPs should be able to connect to this client through our WAN IP.The problem: When connected to a WAN IP, they can see/hear us but we can't see/hear them.Set...
Hi All,I would like to know what is the default TCP idle session time out in FWSM and if i want to increase this timer what can be impact and security reasons and how can i do also ? and is there any setting in firewall to increase a idle timeout set...
Hi,I need to implement a filter for network attacks on UDP port 1085. Somebody is flooding my server with SIP packets.I have a rule set for the linux netfilter firewall to archieve that. It looks like this:iptables -A FORWARD -m string --string "INVI...
I want to configure the ISR router to Send the top 10 CPU and Memory Utilization every two hours to my email addess, I went through too many documents and I found a lot of solutions which are confusing me some of them using cron job, some of them Usi...
I have few servers connected in DMZ zone of my ASA Firewall. Earlier in the old setup there was no slowness. I did migration and upgrade switches to Cisco C3560-IPBASE-M. After this activity the users are started complaining in access the Oracle ser...
