Hey all,I am upgrading our ASA 5520 to the recommended version for the latest security vulnerability - problem is I want to keep the old image in place in case something goes awry, and as such disk0 is too full to upload the new image as well as ASDM...
Forum Posts
I have an Exchange server running on a LAN on the Inside Interface. Recently a new build of GFI MailEssentials (running on the mail server) caused internet connectivity to fail on that server stopping email flow. I can ping other machines on the LA...
Running into issue with ASA+FP devices across the globe where I cannot get a policy applied to the appliances. It basically times out. Tail the log files seems like the direction I should go but which log should I be using with pigtail? I even trie...
object network GUEST-INTERNET subnet 10.205.64.0 255.255.252.0 object network GUEST-INTERNET nat (extranet,outside) dynamic xxx.xx.199.135 Auto NAT Policies (Section 2) 2 (extranet) to (outside) source dynamic GUEST-INTERNET xxx.xx.199.135 tr...
Bellow you'll see a display of ASA5510 firewall running config. I'm unable to ping inside host computers from ASA5510 CLI. However I can access the internet from a computer connected to the firewall. Please take a look at the running config bellow. I...
I'm a newbie - please be patientWe have an ASA firewall that has several DMZ VLANs.A support company that responsible for the SQL Servers wants to use WMI to query server health. Their monitoring server currently on the internal lan, eight SQL server...
Resolved! Is This Normal and What Is Causing It?
Have noticed this today on our Cisco ASA dashboard. What could have caused the lines to be broken? We have no syslog server in place. What else can we do to look into to find the cause? Thank you, Shao
Do i need to purchase 2 x Security plus licenses one for each 5506x to support failover
Have an ASA 5525 running 9.4(4)16 recently upgraded (two weeks ago). Today it started consuming all its memory even upon reboot. At first it started denying ssh and then users complained of VPN tunnels going up and down. When I attempt to SSH I ge...
Hi everyone! I have only one Public IP on ASA 5512-x. Can I setup nat for users in local net and forwarding ports for ftp and mail server with with one public ip? Is this possible ? Maybe somebody had a simultaneous situation?
Resolved! IPS policy on ASA5555-X
Hi, We have installed IPS license on our pair 5555-X ASA and created new ips policy which shows approx 30,000 signature when applied. Can some one advise what is the best way to implemt this IPS policy with less numbers of signatures or its ok to imp...
Hi I work in Security team and our network team is responsible with Company Firewalls .they dont really use CLI at all for configuration changes on the ASAs and I was wondering if there is a way we can receive any syslog messages or alertswhen they m...
So, I can forward UDP ports 4500 and 500 with no issues. But when I attempt to forward AH, ESP, and GRE, it rejects the NAT commands. In sites where I have a /29, this is easy, I assign static NAT, allow traffic, done. So, one global IP address on ...
I have the Anyconnect vpn profile configured to use 2 internal windows DHCP servers as the IP address assignment server. I can VPN in and get IP just fine, the subnet network address is 10.180.160.0/24. However, looks like Cisco ASA is using RFC 19...
Hello folks, I am training myself (with youtube) on how to use a Cisco ASA 5505. I just created a site to site VPN to my Palo Alto 200 from ASDM wizard. The tunnel is up and green according to PA but unable to ping any local IPs from either side. ...
