https://community.cisco.com/t5/network-security/asa-firewall-inspect-for-windows-wmi-traffic/m-p/3334550#M970106 <P>Hi,</P> <P>&nbsp;</P> <P>We are implementing new Nagios to monitor our windows devices via WMI. Nagios and our windows servers are behind the ASA firewalls.</P> <P>&nbsp;</P> <P>As WMI is using random ports between 1024-65535 which is a huge range to open on a ASA 5520.Can we use ASA inspection to allow the traffice with the dynamic ports assigned? I actully tried the DCERPC inspection but it seems not working well, I still see the deny on random ports&nbsp; traffice in the log.</P> <P>&nbsp;</P> <P>I need help to get it work. I am runing ASA 5520 , 8.2(5) and Device Manager version is 6.4(5)106.</P> <P>&nbsp;</P> <P>Thank you</P> Fri, 21 Feb 2020 15:22:58 GMT Ge Qu 2020-02-21T15:22:58Z https://community.cisco.com/t5/network-security/asa-firewall-inspect-for-windows-wmi-traffic/m-p/3334550#M970106 <P>Hi,</P> <P>&nbsp;</P> <P>We are implementing new Nagios to monitor our windows devices via WMI. Nagios and our windows servers are behind the ASA firewalls.</P> <P>&nbsp;</P> <P>As WMI is using random ports between 1024-65535 which is a huge range to open on a ASA 5520.Can we use ASA inspection to allow the traffice with the dynamic ports assigned? I actully tried the DCERPC inspection but it seems not working well, I still see the deny on random ports&nbsp; traffice in the log.</P> <P>&nbsp;</P> <P>I need help to get it work. I am runing ASA 5520 , 8.2(5) and Device Manager version is 6.4(5)106.</P> <P>&nbsp;</P> <P>Thank you</P> Fri, 21 Feb 2020 15:22:58 GMT https://community.cisco.com/t5/network-security/asa-firewall-inspect-for-windows-wmi-traffic/m-p/3334550#M970106 Ge Qu 2020-02-21T15:22:58Z