In the example below, I see that I am listening on port 8080 (www) and then I have the mapped port of 63. I have a questions about that 63. Can that be any number I make up? Or is this supposed to be structured in certain way? I am using ASA 9.4 and above. Also, if I am listening on port 8080 what do I need the 63 for?

(config#)Object network WEB-SERVER
(config-network-object)# host 172.10.150.100
(config-network-object)#nat (inside,outside) static 1.1.1.1 service tcp www 63

Select all Open in new window

I've got a 5545x that I'm configuring for remote access VPN.  I've done a few 5506's but this is my first 5545.

I initially started with AnyConnect. I could get the client connected, but I couldn't get a ping response.  The client statistics showed control data was being exchanged.  Client data was being sent, but not received.

I wiped and reconfigured and got the exact same results.   Then I tried configuring IPSec for the legacy VPN Client because I can always get that to work. :-)

Exact same results.  Client connects fine but no data.  "show cry ipsec sa" shows pkts decap are increasing but pkts encaps are not.  

I figure that I'm just missing something and I've been looking at it for so long that I'm just not seeing it. Hoping someone can look at this and see a typo or a missing statement that I'm missing.

I've stripped out all the non-essentials and sanitized the output.  If I got overzealous with the stripping and cleaning, let me know and I'll repost.

Thanks.

Don

P.S.  I've added a bunch of... junk that I don't usually have while throwing things at this to see if something sticks.

ip local pool RA_VPN_POOL 192.168.255.1-192.168.255.62 mask 255.255.255.192
ip local pool AnyConnect_VPN_Pool 192.168.255.129-192.168.255.254 mask 255.255.255.192
!
object network VPN-Nets
 subnet 192.168.255.0 255.255.255.0
!
object-group network Inside-Networks
  network-object 10.10.0.0 255.255.0.0
 network-object 192.168.0.0 255.255.0.0
!

Select all Open in new window

…

I have a user that is abusing their privileges and would like to block services internally. A user wished to have the Dish Network application installed on their laptop to use while traveling. There has been reports that the use was using the application in the office while on the network. I wish to block services to this application while on the internal network. I currently have Palo Alto firewalls on the network. How do i block this service from my internal network?

Dear, we have a public server. how can we block remote desktop service to its public IP address? and allow only to its local IP?

I tried in Firewall advance setting, set the scope, but did not help.

Hi Team,
 
            I need a data tracker software free tool.I want to find which IP address/machine/user use upload/download amount of data.
I need a software tool for this monitoring.So can you please suggest me best tool free version.

Inherited computers from another IT company that have Trend Micro Security Agent installed on them without the uninstall password, does anyone know how to go about changing the password to uninstall. It's causing network issues.

I am using Linux, trying to connect to my ftp server using service-U in a remote data center.  I have an always on vpn connection to the data center. From a windows box, I can ftp just file to the server,  it from the Linux box, I keep on getting this error message.


First it says:
Connected to 10.2.x.x
421, service not available, remote server has closed connection

So I looked at the logs on my ftp connection and I didnt see any connection attempt.

Is this a Linux issue or my firewall, I'm thinking it's my firewall.

Been trying to upgrade the ios on ASA 5525s from 8.6 to 9.44. To do so there is first the need to upgrade to 9.04 and than to 9.44 but when the upgade to 9.0 was done a lot of config on the asa went missing; including nat rules, object network and access list entries etc. Any ideas why it happened.

Kind regards

Hi,

forgot windows 10  laptop password on old laptop to get into laptop. How do i reset or get into this old laptop. please advise

I've been asked to turn on logging for code ASA-6-302014.  According to Cisco it's the Teardown TCP connection.
I have logging enabled and have set notifications  for syslog ID 302014.  I can't seem to get ASA-6-302014 to show in my log files, but I get ASA-5-302014.  Is this the same thing?

Our ASA is a 5520 8.2(1) 

Thanks,

Eric

Dear All,
         Recently I configured TMG firewall as a proxy I make all the rules & every thing is working fine. If I login to TMG server and ping any public ip’s or any domain like google.com etc. I am able to ping but on client computer If provide them internet via TMG then are able to access but not able to ping any public ip or domain like google.com
         So please need your support to enable ping
       

Thanks in advance




Regards,

In Palo Alto Networks there is a test sec policy command that will let me know whether the traffic from source A to dest B for port C will pass or be denied. i.e. test sec policy 10.10.10.100 to 10.10.20.100:80 ALLOW (or DENY). Is there a similar function within VMWare NSX?

How do i allow a third party IP Address or domain.com  to come thru my firewallD for Centos 7.  I need a step by step explanation how to do this.  This is the situation, I have a site builder module installed on my control panel. When i access it, it takes me to the third party company where i do the site creation. Once the site is completed, i have to publish it to a domain on my server. The only way to do this is allow the third parties ip address access so i can publish the content to a domain on my system. Please Help