Top 20 Cisco ASA 5500 Firewall Questions & Answers

Easiest way to is so issue the following command on the cli:
more system:/run
This will get any preshared keys you have in the config.

if it is really deleted from FLASH, you will need to connect to ASA with a console cable, start up TFTP server on your pc, and in TFTP copy your ASA image file (.bin - on your CD that you got with ASA) so that you can get it from pc to asa.
then use tftpdnld command to set all the parameters on asa and start the download of the file from your pc .... after it has been done - just reboot asa :)

Yes, it is possible and Yes you have to purchase it from Cisco.
Sorry, that is how they make the big bucks.
Consider a service contract on the unit, then you can download the firmware much cheaper.

You can do this, For your ref i hv given you a link

http://channel9.msdn.com/forums/9GuyAroundTheWorld/251722-Cisco-Pix-to-Windows-Vista-Native-Client-Using-L2TP-IPSec/

http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html

From the US, you can call: 1.800.553.2447

From there, Cisco will be able to tell you what your warranty status is by the device's serial number, and can also provide you with a quote if your warranty has expired.

Use a web browser and point it to the private IP address of the ASA. Download ASDM and run through the wizards.

Good Luck!

It is not possible to block the BitTorrent protocol, as the client applications have the ability to use different port numbers.  I suggest one of the following courses of actions:
1)  Added deny entries to your outbound access-list that block the specific IP addresses of the torrent trackers.  For example: tracker.thepiratebay.org = 77.247.176.145
tv.tracker.thepiratebay.org = 77.247.176.154
tracker.mininova.org = 87.233.147.137

2)  Re-configure your outbound access-lists to allow only services required for business activities.  For example, allow only http, https, and ftp, instant messaging from all your network.  Allow only dns from your DNS servers.  Allow only smtp from your mail server.

Hi,

try this http://www.ciscopress.com/articles/article.asp?p=25326

it will helps you

thanks .

take this site address u will get all the commands of firewall

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/asa80cfg.pdf

PPPoE is not supported when failover is configured on the security appliance, or in multiple context or transparent mode. PPPoE is only supported in single, routed mode, without failover.

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/pppoe.html

hello ,
try this http://www.ecommercetimes.com/story/21764.html
it will helps you ,

thanks.

You seem to have the last resort (o.o.o.o) set to VLAN1 which is set as an inside interface.
Is VLAN1 connected to the outside router or internet backbone?
If not, change the last resort to the outside Ethernet port.

This is for the pixes, I haven't upgraded an asa yet...should be close or the same

* find latest version of code, these are usually *.bin files located on http://www.cisco.com/cgi-bin/tablebuild.pl/pix
* confirm the flash and RAM requirements of the PIX OS software versus what the PIX has (”sho ver”)
* make sure you have a backup of the old PIX OS and PDM to the tftp server (or at least confirm the software is there)
Note: You cannot back them up from the PIX, so you will need to download them and put them on the tftp server * put in a change control form
* once change controls confirms date/time do the upgrade:
wri mem*** only if you save your configs via tftp wri net conf t ca save all copy tftp://your tftp server ip/pix635.bin flash:imageskip this if you don't use pdm copy tftp://your tftp server ip/pdm-304.bin flash:pdm *** if this is a failover pair, upgrade the other pair reboot

If I understand you right, you want to setup a ASA firewall.( VSNL broadband is a company in India I believe) but once you get a static IP
you can assign that ip address to the outside of your asa. Put your dsl
router in pass through mode. This will then allow you to nat your inside
network and for you to accept vpn requests. To set all this up you need to get documentation from Cisco.

this has been nicely explained here:http://www.computerfreetips.com/Cisco_router_tips/ASA-VPN-tunnel.html

talk to CISCO on there official forum. real start here https://community.cisco.com/ why go anywhere else. as rules can be fluid , for sure if security gets more tight every day. talk to them , actual

these are the popular firewall for recent days: ·Packet filtering firewall ·Circuit-level gateway ·Stateful inspection firewall ·Application-level gateway (aka proxy firewall) ·Next-generation firewall

• Packet filtering - ...
• Stateful filtering - ...
• Routing support - ...
• Transparent firewall - ...
• AAA support - ...
• VPN support - ...
• Supports IPv6 - ...
• VPN load Balancing -

Su mensaje no califica como una pregunta o consulta para un problema, intente en otro lugar NO HAGA ESTE SITIO CON SU BASURA Lleve su BASURA a otro lado Su mensaje califica como SPAM

Your message does not qualify as a question or query for a problem, try somewhere else DO NOT MAKE THIS SITE WITH YOUR GARBAGE Take your GARBAGE to another Side Your message qualifies as SPAM