How can we allow internal users to access internet through ASA firewall?

Hello,
I am new to security track, i have been asked to setup lab and allow users from inside firewall to access internet. here is my lab setup
PC -> switch 1 (layer2) -> (inside) ASA (outside) -> switch 2 (Layer2) -> Router
does switch 2 port needs internet access through router?
what configuration required on ASA to allow users behind the firewall to access internet?
any help on this would be much appreciated.
thanks,

Hi,
Okay , can you clarify on this for me. Are you able to ping the internet from the ASA outside interface ?
Just try something like this:-
ping 4.2.2.2 .. Does this work ?
If this does not work , then i think the ASA even is not able to get to the internet and that would be a problem on the router.
Also , internet from Switch 2 is not a requirement as that is only a Layer 2 device.
You can assign the ISP allocated address on the PC , connect it to the Switch 2 port and then try to ping something on the internet or surf internet and i think that should work.
Thanks and Regards,
Vibhor Amrodia

Similar Messages

How can I allow other users on my macbook to view my iphoto library when th

How can I allow other users on my macbook to view my iphoto library when they are logged in. I do not have a network, and the users (my family) all log in seperately when they use the computer. Does anyone know? Thank you.

rdoss
Welcome to the Apple Discussions.
If you want others to be able to see the pics, but not add to, change or alter your library, then enable Sharing in your iPhoto (Preferences -> Sharing), leave iPhoto running and use Fast User Switching to open the other account(s). In the other account(s), enable 'Look For Shared Libraries'. Your Library will appear in their source pane.
Remember iPhoto must be running in both accounts for this to work.
Regards
TD

How can I allow a user (client) to choose a local image file (on his hard d

How can I allow a user (client) to choose a local image file (on his hard drive) and modify it using an applet from his browser ? I am trying to develop a web page that enables the user to choose an Image file, manipulate the image using a java applet, and display the results.
Using Java�s �JFileChooser� does not work when called from a browser, probably due to security privileges issues. On the other hand, I can choose and upload any file using a JavaScript form:
<FORM METHOD="POST" ENCTYPE="multipart/form-data" ACTION="process.asp">
<INPUT TYPE=FILE NAME="file1"><BR>
�
It seems that I can choose an image file with a Java script form and process an image with an applet. How can I choose a file AND process it locally ?
(I do not wish to upload the file to the server using JavaScript form and then back to the client�s applet for processing since it will be a tremendous waste of resources).
Will appreciate any solution.
Thanks !
( my email is: [email protected] )

"Using Java�s �JFileChooser� does not work when called from a browser, probably due to security privileges issues. "
You can do this if you sign the applet...

How do I allow another user to access my pictures, etc?

Hi
still getting used to the Mac feel, after switching over from Windows, and I have a question that I can't seem to find an answer to.
I have the following issue:
Under my account, I have all our family photos and documents. I have also set up a user account for my wife. When she logs on, she can't access our photos, etc., because she has no read/write rights. (Which is logic, since they are my "private" folders.
I have then logged on myself, used the "info" button on the respective folders in order to give her user the rights to access my folders, but I can't seem to "allow everyone" to access the folder(s). What are the settings I need to use?
Thanks
MN
Imac 24" Mac OS X (10.4.9)

Hi,
I have tried to recreate this myself, and your right even after changing ownerships and movie the iPhoto library to the public folder ( Harddrive/Users/Sharing) the second account is still not allowed to access the library. This is strange behaviour because moving the iTunes Music Library to Sharing does allow all users to access the library.
All I can suggest is that you deselect the option in iPhoto preferences (Advanced) to "copy files to iPhoto library" then store your photos in a folder that resides in the Harddrive/Users/Sharing folder - then your wife can use the import command to add them to her copy of iPhoto (she should also deselect the copy to library option)
Regards

How can I allow network users to use File Sharing on 10.8 Server?

I am in the process of setting up a new OS X 10.8 Server. I have exported/imported the network users from my previous OS X 10.6.8 Server using Workspace Manager. I have re-entered the passwords of the users. I have existing clients running (stil logged in).
I have set up the File Sharing service in Server.app. I have several mount points. I have made the Users mount point available for home directories over AFP.
Now, the system administrator can connect to the server and get access to the file shares. So the basic file sharing system works.
Also: the users on a client can get there password verified (e.g. when unlocking screen protection) by the server. It is just AFP they can't get access to, while the system administrator account (OD /Local on the server) can be used. So, the password in the server is OK too. It seems to be a matter of privileges.
But no network user (OD user in directory /LDAPv3/127.0.0.1 on the server) can get access. Where can I give network users privileges for File Sharing on the server?
I did try to add either the "Open Directory Users" group or a specific user that was imported into com.apple.access_afp. If I do that, there is partial success. I can connect to the server from the client with a user account other than system administrator from the server (but connecting is slow). But Mobile Home Sync does not work:
1:: [13/04/05 16:11:10.379] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:11:20 +0000
1:: [13/04/05 16:11:20.782] ==========================================================
0:: [13/04/05 16:11:20.782] Starting automatic sync of "HomeSync_Mirror".
1:: [13/04/05 16:11:20.786] Peer "network" reports changes since last sync.
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:alias:]: isRemote = NO
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: peer = <SPeer_FS:0x7fd5a5009520> = local, optionalStoreID = (null), peer.storeIDString = *
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootPath        = /Users/gerben
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: storePath       = /Users/gerben/.FileSync/store.filesyncstatetree
1:: [13/04/05 16:11:20.787] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootAlias       = {path='/Users/gerben', targetName='gerben', volumeName='Macintosh HD', type=DIR, volumeCreateDate=2010-08-10-12:58:16, targetCreateDate=2011-08-28-18:39:13, parentDirID=37638, nodeID=3003598, filesystemID=0000 ('0000'), signature=0x482b ('H+'), isBootVolume=YES, isAutomounted=NO, isEjectable=NO, hasPersistentFileIDs=YES, mounted=YES, url='file://localhost/'}
0:: [13/04/05 16:11:20.789] -[SPeer_FS _mountServerCallbackShares:status:]: received error 64
0:: [13/04/05 16:11:20.790] EXCEPTION: _mountServerCallbackShares:status: (Host is down) <-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64">
0:: [13/04/05 16:11:20.790] USERINFO: {
0:: [13/04/05 16:11:20.790]     NSLocalizedDescription = "Host is down";
0:: [13/04/05 16:11:20.790] }
0:: [13/04/05 16:11:20.790] BACKTRACE: {
0:: [13/04/05 16:11:20.790] ? | 0x105cb79b7
0:: [13/04/05 16:11:20.790] ? | 0x105cbf0e5
0:: [13/04/05 16:11:20.790] ? | 0x105c2c866
0:: [13/04/05 16:11:20.790] ? | 0x105c2babd
0:: [13/04/05 16:11:20.790] ? | 0x105c2acb4
0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb72a
0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb6a2
0:: [13/04/05 16:11:20.790] ? | 0x7fff874cf8bf
0:: [13/04/05 16:11:20.790] ? | 0x7fff874d2b75
0:: [13/04/05 16:11:20.790] }
1:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. (-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64")
0:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. Not enough peers will be available to continue syncing.
0:: [13/04/05 16:11:20.790] Aborting sync of "HomeSync_Mirror".
1:: [13/04/05 16:11:20.790] -[SPeer abortSync] "local"
1:: [13/04/05 16:11:20.797] -[SStore_FS setupWithAlias:andRef:] (Store-FS.m:447): unlink('/Users/gerben/.FileSync/.fstemp.QW1Gh-bhvgEhVwmG3.noindex')
0:: [13/04/05 16:11:20.798] EXCEPTION: !IF <-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'">
0:: [13/04/05 16:11:20.798] BACKTRACE: {
0:: [13/04/05 16:11:20.798] ? | 0x105c2bb66
0:: [13/04/05 16:11:20.798] ? | 0x105c2acb4
0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb72a
0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb6a2
0:: [13/04/05 16:11:20.798] ? | 0x7fff874cf8bf
0:: [13/04/05 16:11:20.798] ? | 0x7fff874d2b75
0:: [13/04/05 16:11:20.798] }
1:: [13/04/05 16:11:20.798] -[SStore_FS deleteStateTreeTurdFile] (Store-FS.m:476): unlink('/Users/gerben/.FileSync/store.filesyncstatetree.statetree_dirty')
1:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. (-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'")
0:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. Not enough peers will be available to continue syncing.
1:: [13/04/05 16:11:20.798] EXCEPTION: SFAbortedException <-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'">
1:: [13/04/05 16:11:20.798] -[SSyncEngine threadMain_SyncEngine_sync:]: sync failed with exception "-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'"".
0:: [13/04/05 16:11:21.066] Sync of "HomeSync_Mirror" encountered errors. (_mountServerCallbackShares:status: (Host is down))
0:: [13/04/05 16:11:21.067] Last successful sync completed at 2013-04-04 20:17:15 +0000.
0:: [13/04/05 16:11:21.067] Finished sync of "HomeSync_Mirror".
1:: [13/04/05 16:11:21.067] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:31:21 +0000
1:: [13/04/05 16:11:21.284] 1-pass sync of "HomeSync_Mirror" took 0.02 seconds

Hi Gerben,
Try creating a brand new user, that's not imported and see if that works. Every user/group has a little gear in the Server.app/Users or Groups which allows specific access to specific services, perhaps filesharing is off in that section?
Is your DNS setup properly? Can you verify that clients can see the FQDN of your server?
After setting up the Users folder for mobilehomes, did you check whether the group and the separate users have access to filesharing? I am able to select the correct homefolder /Users and restrict the homefolder size.
Goodluck!
Jeffrey

How can I allow Contribute Users to save documents somewhere other than "docs"?

Our website was rebuilt by an outside company, who took my file structure and dumped it into the new site (I use Dreamweaver and our staff uses Contribute for their little niche of the web). We have a large site with multiple folders within the site. Those folders have several folders below them to sub-divide the tons of info we have to keep straight. However when I set up the parameters for the Contribute users, I only seemed to have one option to save documents (the "docs" folder).
I need for Contribute users to be able to save documents/files deeper in the file structure. How can I do that?
Thanks for any assistance! I hope this made sense.
Mark

The answer depends on how "good" your Contribute users actually are. By default, Contribute always places documents in the same folder as the page in a "documents" folder. I see two potential options: (1) the user(s) needs to go to the where the document needs to live and place the link at that level or (2) you can show your user the "Publish File From My Computer" (under file, in the third section) which would allow them to place the document in the correct location and then link to it from whatever page is appropriate. Personally, that would be a last choice.

How can I allow the user to pause the audio of a slide (and restart it) before continuing on to the

Most of my slides have a combination of test/graphics and voiceover. I would like to allow the user to pause, resume, and replay the audio of each slide. I know, as a learner, I sometimes need to go back and hear something again -- or pause until a distraction has passed.
How can I tie audio to a playbar or set of buttons? I know if it's video, it can be done. How do I give them control of the audio?
I am in Captivate 7. My files are .mp3 files.
Thanks - TL

You cannot add extra buttons to the playbar but you could add a Replay button to the slide and have this button execute a Standard Advanced action with a Jump to Slide action that points to the same slide you are currently on. This should effectively jump your user back to the beginning of the same slide.

JFileChooser, how can you allow the user to select MORE than 1 file?

Hello everyone.
I want to allow the user to select multiple files from a directory, not just 1, but not just the whole directory.
Currently I see these 2 options from looking at the sun's JFileChooser demo:
//Create a file chooser
        fc = new JFileChooser();
        //Uncomment one of the following lines to try a different
        //file selection mode. The first allows just directories
        //to be selected (and, at least in the Java look and feel,
        //shown). The second allows both files and directories
        //to be selected. If you leave these lines commented out,
        //then the default mode (FILES_ONLY) will be used.
        //fc.setFileSelectionMode(JFileChooser.DIRECTORIES_ONLY);
        fc.setFileSelectionMode(JFileChooser.FILES_AND_DIRECTORIES);but both don't allow the selection of more than 1 file.
When I say, select more than 1 file I mean the user can hold in SHIFT or CTRL and select files.
Any ideas how to do this?
Thanks!

http://java.sun.com/javase/6/docs/api/javax/swing/JFileChooser.html#setMultiSelectionEnabled(boolean)
Cheers,
Laird

How can I allow normal user change their LDAP password?

I use Solaris10 + Sun Directory server 5.2SP6 + Samba, how can allow normal user change the password themselves?
Thanks.

Depends on application you are using. I use ColdFusion and here is how I allow users to change their passwords
                    <cfldap action="Modify"
                         dn="uid=#form.UserLogin#,ou=your_ou,dc=example,dc=com"
                         attributes="userpassword=#FORM.newPassword#"
                         server="#servername#"
                         Port="#portnumber"
                         username="uid=#form.UserLogin#,ou=your_ou,dc=example,dc=com"
                         password="#form.userpassword#">

How can I allow a user to control my Edge Animation using only the scrollbar?

I have seen a few examples of an Edge Animation being conrolled by the scrollbar, and I am wondering how I could achieve the same effect.
Example:
http://dominikruckli.ch/scrolltest/scrolltest.html
I have searched the corners of the internet and have found 2 or 3 different tutorials, but none of them have proven successful.
In basic terms, I am creating an animation that involves a character getting from Point A to Point B, from the beginning of my timeline to the end.
Rather than exporting my animation so that it plays automatically, by itself, I would like for a user to scroll vertically, and the playing of the animation moves in conjunction with the scroll bar.
As the user scrolls from top to bottom on the scrollbar, the character in my animation moves from Point A to Point B.
Also, if the user stops scrolling... the character will stop moving as well.
In addition, I would like the surrounding area, outside of my stage, to remain hidden. I do not want to allow the user the ability to scroll around and see off of my designated stage area. I only want the scroll bar to act as a playhead for the animation.
Any help will be greatly appreciated.
Thank you
Note:
If you have special CSS (or other form of Code), please provide specific instructions on how to insert this code, where it should be located, what part(s) of the code should be altered, and any additional instructions on how to apply any form of coding. (Screenshots would be amazing)

Never mind. I figured it out myself. I changed the myComp.play("scenefour"); to myComp.getStage().play("scenefour"); and it worked fine.

How can I allow multiple users to edit a single shared iCal calendar?

Is it possible to allow multiple users to edit a single shared iCal calendar? I also want to provide different permissions to those users. Is this possible through .MAC? Is it possible on Mac OSX Server?

I would like 2 agenda synced through .Mac but it does not work.
I have 2 computers and 2 laptops. A very simple agenda with 3 calenders. Myself my partner and the office calender. I want to publish my calender and that of my partner. The office calender I would like to sync so that we can change the office calender at any location.
I set up sync only for iCall and have a .Mac account. When I change anything on any of the calenders in iCall nothing happens on any of my other locations. Even though the locations are registered as synced. I can see the sync wheel turning but at the end of it the calenders are not synced.
At this moment I fully understand the publish and unpublished calenders but have no clue what so ever what syncing does for iCall. There seems to be no functionality to it. It does not transport any calender info over .Mac. There is no visable check to see what is happening and the process of syncing is not transperent. Lots of my friends go to me for advise on Apple issues but as far as sync wether iCall or Addressbook I always tell them sync does not work and I have no clue why others have it working. I haven't met any people here in Holland either that got in working. I suppose with iCall you have to get third party software to share calenders editable calenders. Really hopeless situation, wish Apple would just have a manual stating what sync can do and what it can not. Hours wasted on this issue trying to get it to work.
Hope anyone here can help out.

How can I allow the user to retake a quiz from the middle of it in Captivate 7?

Hello Captivaters,
I would like to force the learner to pass a quiz before he can continue on with the training. If he doesn't pass the quiz, he will need to go back and take it again. The "retake" button allows him to do this, but I will actually like to have 4-5 of these "quiz checkpoints" in the eLearning -- each separated with presentation material -- so that the user proves he understands the material before advancing.
Therefore I would like to create my own "retake" button at the end of every "quiz checkpoint" that takes the learner back to the first question of that checkpoint (not to the first question in the training). So far, I have been able to create a button that appears after he gets a certain amount correct to allow him to continue, and I want to create a button that appears that takes him back to the first question in the checkpoint if does not get the required amount correct and retake those questions. The first part is easy, but I also need to add the function or reassign some variable to allow the user to retake the quiz. I hope I am making sense.. Any help would be much appreciated!
- Ryan

It's great! Thanks again.
Here is the issue now. I guess it's not a huge problem, it's just if I can't find a better way, what I need to do will take a lot of time.
Like I mentioned before, I created this "results" slide that on enter either shows a "congrats" button or a "retry" button, depending on whether or not the user passed the quiz. I have copied this slide and pasted it behind all of the other sub-quizzes in the training, but when I do that, of course the link between the buttons and the conditional advanced action break.
As you know, when you duplicate a slide, all of the names of the objects on that slide are "refreshed" and are replaced with new generic names because you are in fact creating new objects as well. This means that I need to rename all of the objects on that slide (even though its a duplicate) and then replace all of the "old names" in the advanced action with these new object names.. Is there a faster way to do that?
Thanks again!!
Ryan

Routing and Remote access - internal network not accessing internet through public network!

Hello,
Good Evening to all.
I got an issue in routing and remote access on windows 2003 server. This server is already configured as File server, domain server and Application server. Also configured as router (through routing & remote access) for connecting three different
network to each other. So This server has three NIC card installed and each NIC card represent separate network.
three different network are - 192.42.160.0/24 , 192.42.161.0/24, 192.42.162.0/24
Three NIC card installed on server as with following IP address -
NIC -1 = 192.42.160.220 , Sub- 255.255.255.0 , Gateway - NO
NIC -2 = 192.42.161.220 , Sub- 255.255.255.0 , Gateway - 192.161.220.112 (This ip for internet access so 4g router IP)
NIC -3 = 192.42.162.220, , Sub- 255.255.255.0 , Gateway - NO
Now the issue is I can reach to internet & (also pinging to router ip 192.42.161.112) from only one network that is - 192.42.161.0/24 , BUT when I trying to access internet from another two network (192.42.160.0/24 & 192.42.162.0/24) I cant access
it and moreover can't ping to internet router ip - 192.42.161.112...
So how I can access to internet from other two network also?
I was already configured static routing for all three network but still I was not success. really I don't know what exactly static routing it should be done in routing & remote access so that all three network can reach to internet?
Sorry if I am not able to explain properly. Please let me know if you need more explain on this...
Thanks to all.

Dear Milos,
I am happy to hear from you....
1.- Actually the setup was done long before by another guy and right now I don't want to change it.
Nice to hear from you! Thank you so much. Actually this is first time I am using technet forum upon the suggestion from one of the my friend. So any your help from you will help me a great in this issue...
I ran the route print command and given follow are the results.
I have only added the default route as per the below routes. Please guide me know how to add other static routes for three network.
D:\Documents and Settings\Administrator>route print
IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 30 05 ad 8f 5c ...... Broadcom NetXtreme Gigabit Ethernet - Teefer2 Mi
niport
0x3 ...00 0e 0c a7 c4 f8 ...... Intel(R) PRO/1000 GT Desktop Adapter - Teefer2 M
iniport
0x4 ...00 0e 0c a7 c5 85 ...... Intel(R) PRO/1000 GT Desktop Adapter #2 - Teefer
2 Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.42.161.112 192.42.161.220 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.42.160.0 255.255.255.0 192.42.160.220 192.42.160.220 20
192.42.160.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.160.255 255.255.255.255 192.42.160.220 192.42.160.220 20
192.42.161.0 255.255.255.0 192.42.161.220 192.42.161.220 20
192.42.161.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.161.255 255.255.255.255 192.42.161.220 192.42.161.220 20
192.42.162.0 255.255.255.0 192.42.162.220 192.42.162.220 20
192.42.162.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.162.255 255.255.255.255 192.42.162.220 192.42.162.220 20
224.0.0.0 240.0.0.0 192.42.160.220 192.42.160.220 20
224.0.0.0 240.0.0.0 192.42.161.220 192.42.161.220 20
224.0.0.0 240.0.0.0 192.42.162.220 192.42.162.220 20
255.255.255.255 255.255.255.255 192.42.160.220 192.42.160.220 1
255.255.255.255 255.255.255.255 192.42.161.220 192.42.161.220 1
255.255.255.255 255.255.255.255 192.42.162.220 192.42.162.220 1
Default Gateway: 192.42.161.112
===========================================================================
Persistent Routes:
None
Regards & Thanks
Mahesh

How can i give multiple users admin access?

I would like to give another user on my macbook pro admin access, so that they can install programs without having to ask me for the password each time. I do not want the password to be the same for my profile, because I don't want them getting into my account. So is it possible to have a separate password for admin use only? This might be a dumb question and I know their is probably a simple way to do this, but I'm new to macs so any help would be greatly appreciated. Thank you.

Convert a standard user to an administrator
Choose Apple menu > System Preferences, then click Users & Groups.
Click the lock icon to unlock it, then enter an administrator name and password.
Select a standard user or managed user in the list of users, then select “Allow user to administer this computer.”
http://support.apple.com/kb/PH18891

How do I allow other users limited access to iPhoto?

I am seeking to create other user accounts for my Mac that will allow my wife and my 8 year old to view photos in iPhoto but will not allow them to screw it up (i.e., will not allow them to edit or delete any photos, etc.). Is there a way that I can give them access to view only? Thanks.

When you share a Photo Stream and invite a family member to view it, the family member will see the photo stream in the iPhoto Library, in the iCloud section: It will look like regular albums.

How can we allow internal users to access internet through ASA firewall?

Similar Messages

Maybe you are looking for