Cisco Hacks: Tips, tricks and articles about Cisco products... - Security

Allow ICMP through the ASA

nospam@example.com (Reeve Ramharry) — Sat, 08 Sep 2007 16:07:23 -0400

Both ping and traceroute are useful tools in troubleshooting network problems but "out of the box" these tools do not work with the ASA. The reason for this is simple, these tools all use ICMP that is blocked by the ASA.
Continue reading "Allow ICMP through the ASA"

ASA Security Levels

nospam@example.com (Reeve Ramharry) — Wed, 08 Aug 2007 20:37:00 -0400

Configuring an ASA can be a dauting task if you are not familiar with some concepts that are key to the operation of the device. One such concept is that of security levels.
Continue reading "ASA Security Levels"

ASA Release 7.2(2) and Gmail

nospam@example.com (Reeve Ramharry) — Fri, 06 Apr 2007 09:24:14 -0400

Recently we upgraded our ASA to software version 7.2(2) and all of a sudden I started to get compliants from users that they were unable to receive email from Gmail with attachments.
Continue reading "ASA Release 7.2(2) and Gmail"

ICMP Redirect on an ASA

nospam@example.com (Reeve Ramharry) — Sat, 31 Mar 2007 10:08:14 -0400

Recently we upgraded our old FreeBSD firewall to a Cisco ASA5520 and I noticed that ASA does not generate ICMP Redirects if it is used as the "default router" or gateway for a network.
Continue reading "ICMP Redirect on an ASA"