Pix

Configuring an Active/Passive ASA Pair

2010-11-20 ·4 min read

A buddy asked for some help on configuring a pair of ASAs in active/passive mode, and, by pure coincidence, my newest project is to set up the same. I’ve done it many time, but it’s one of …

asa cisco failover pix

Using SPF Records To Build Objects

2009-10-16 ·4 min read

My biggest complain about modern firewalls is their lack of the ability to create rules based on URLs or HTTP streams; you have to open access between IP addresses. Yes, I know there are other means …

_netblock asa dig dns fwsm google http mail object object-group pix records security spf txt

Object Groups in the ASA/FWSM/PIX

2009-10-01 ·5 min read

I can’t believe I haven’t talked about object-groups yet. I had a whole other blog entry written up, and, when I went to link things over, I realized I couldn’t find an intro to it. …

acl asa fwsm group object object-group pix

ASA and Proxy ARP

2009-09-11 ·3 min read

Wow. A new entry. Everyone sit down before you pass out. I’ve got a real-world example for you today. We have an ASA 5540 installed at a business unit with interfaces in multiple networks, …

arp asa cisco fwsm nat pix proxy syn

Port Forwarding on the ASA/FWSM/PIX

2008-05-27 ·2 min read

Here’s a simple one since I haven’t updated in a while. I have my ASA 5505 at home and want to forward TCP/80 traffic to my public IP to my webserver at 10.10.10.10. There are two steps …

asa firewall fwsm nat pix

NAT on a PIX/ASA

2008-03-13 ·3 min read

NATting sucks and can be confusing. I’m sure everyone agrees to that, but you have to use it at some times. In a PIX/ASA, it’s easy to configure a simple setup, but can be …

acl asa firewall nat pix

Commenting Access-lists

2008-03-12 ·2 min read

There’s a very-overlooked feature of access-lists – the remark. Yes, this is very basic, but it’s worth mentioning, as it has saved me anguish time and time again. I use remarks to …

acls asa firewall pix

Can't Login to Your ASA via SSH or Telnet?

2008-02-18 ·1 min read

I deployed a Cisco ASA at a location and couldn’t get logged in via SSH. I would get prompted, but, no matter what username/password I put in, it would just reject me. After some digging, it …

asa firewall pix