Hi,
I have a pair of HA ASA and 2960 switch stack (two member). As shown in the rough diagram, I am using Port 1 of each ASA connecting to Port 47 of the switch stack; Port 2 of each ASA connecting to Port 48 of the switch stack. The port-channel i...
ASA5515
ASA version 9.2(2)4
I am a newbie and this is my first post.
We currently run out of Public IPs and we need to publish another service.
Here is the current access list and nat.
access-list out-in extended permit tcp any host Internal_Hos...
Hi,
We have an ASA 5516X running 9.5(2) and we need to upgrade the OS, in order to get a feature to edit the AnyConnect Connection Profile Options (XML). We were advised to go on to 9.6(2) which is the currently recommended version, but I can see t...
Hey there,
I recently bought the firepower module and installed it on my ASA 5508
Tech specs:
Firewall:
ASA 5508ASA to 9.6(4)Firepower (6.2.2.1-73)ASDM 7.9(1)
Client PC:
Debian 9 Stretchopenjdk version "1.8.0_151"
OpenJDK Runtime Environment (bu...
I have an issue, I am assuming with Java, where the asdm is taking forever to load. Then when it does load I can't do anything because it takes so long to load. The issue only occurs if I am connecting to the ASDM over any port other than 443. I know...
With recent disclosure of 2 new vulnerabilities "Metldown" & "Spectre", does any one know what is the signature name & id which we can enable in IPS to prevent the attack.
Hi Guys,
I need one help where there as per requirement we made a custom signature on snort inbuilt in Firepower series. But the issue is its not triggering anything.
I am copying the signature which is made and its based on content. The requirem...
Hello, this is my first post in this community, we have a Cisco ASA 5512-X and two networks in our system, one primary and one secondary, me connect to the internet through the primary network but we want to configure also the secondary network so in...
Hello,
I am currently in the process of taking an existing firewall and moving all of the sub-interfaces over to a new ASA 5585. An SNMP server sits on the trusted side of the firewall, and it polls agents on the untrusted sub-interfaces of the fir...
I am developing a custom reporting and calculation application for a team of users. While I am awaiting access to a mock lab, I know I will need to manually define a list of applicable firewall devices of various models (and firmware versions) and de...
Hello,
My secondary ASA shows failed in the output of show failover because of a down interface. I was wondering will the failover work automatically if the active fails or failover will not work because the secondary is in a failed state
Hello. I inherited a lab which contains several ASA 5200 firewalls (of the same vintage). I went to it via browser and downloaded/installed the onboard ASDM which was version 6.4(5). However when I tried to run either ASDM or via Web Start, I get the...
Hi..
SSH Server on Internet <--- { Wan Router <--- ASA5500 <--- LAN <- SSH Client }.
SSH client in our network want to access to SSH server on the Internet.How can I configure to allow ssh access on ASA5500.
Scenario: A customer has an existing LAN 192.168.100.0/24 with a gateway of .1 on the ASA. They have a new phone system that uses 172.16.2.0/24. The phone system has its own switch for the phones as well as a router. External phone traffic has to tra...
