3
votes
1answer
115 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
2answers
5k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
10
votes
3answers
516 views

Cisco ASA and multiple VLANs

I currently manage 6 Cisco ASA devices (2 pairs of 5510s and 1 pair of 5550s). They all work quite nicely and are stable so this is more of a best-practice advice question rather then "OMG it's ...
1
vote
1answer
99 views

Allow one external client to use a NAT through ASA5510 Security Plus

I keep struggling with Cisco ASA. How I can make a certain NAT (RDP, SSL or whatever) and secure it by allowing just one external client with fixed internet IP to make use of this NAT?
5
votes
1answer
724 views

Cisco ASA Config for PCI Compliant Office

We have a small business office, but due to PCI compliance we need to segment this into two internet networks (one 'compliant' and one for any other devices to use). We currently have a Draytek ...
2
votes
1answer
2k views

Cisco ASA - Enable communication between same security level

I have recently inherited a network with a Cisco ASA (running version 8.2). I am trying to configure it to allow communication between two interfaces configured with the same security level ...
2
votes
1answer
265 views

Blocking GotoMyPc on ASA 5505

I am trying to block GotoMyPC traffic using a Cisco ASA 5505. On gotomypc.com they say you can block all traffic to poll.gotomypc.com to stop all access. What I have done is create a network group ...
3
votes
1answer
233 views

ISP has asked for snmp polling to our firewall - what is the risk?

We have had some issues with accessing certain things through the ISP used by one of our branch offices. They have asked us to allow them SNMP polling access to our Cisco ASA 5505 in order to check ...
0
votes
0answers
378 views

Cisco ASA 8.4 NAT Issue

I upgraded to 8.4 some time ago and I guess a lot of the NAT rules changed. The migration seemed to have gone flawlessly, but this afternoon I realized that I could SSH into a box inside my network ...
0
votes
1answer
1k views

Split tunnelling for Site to Site VPN on Cisco ASA

Is it possible to do split tunnelling with a site to site VPN connection using Cisco ASAs? We have a Cisco ASA 5510 at head office, and Cisco 5505 in our branch office, currently connected via a ...
2
votes
5answers
4k views

Outbound ports to allow through firewall - core requirements

If I only want to allow HTTP, POP3, IMAP4, SMTP functionality for outbound traffic (i.e. no servers hosted at site) are there any additional ports that need to be open to allow those functions to work ...
1
vote
1answer
518 views

Cisco IOS rewrite http url

Is there a way that I can configure my router to rewrite http requests? So for example, if: http://www.example.com/porn.gif is being accessed, it'll be re-written as: ...
2
votes
2answers
314 views

Cisco ASA Security Contexts: Any Real World Installs?

We are looking at deploying a Cisco ASA 5520-I am looking at the security contexts feature, and was wondering if anyone has deployed their ASA in this way, and how it is working out for them. Have ...
1
vote
1answer
2k views

ASA5520 7.2 to 8.x upgrade

Our customer wants to upgrade his ASA5520 from 7.2 to 8.x. He has quite a big config and uses lot of features. eg. a/s failover, subinterfaces, ~70 VPN tunnels (ssl and ipsec), bunch of grouped ...