Hello, We are about to start the journey of migrating many virtual servers from our VMware estate to Azure. We only have about 5 servers in there now, but will move around 100 over this year I think. At the moment I'm just using the NSGs for fire...
Forum Posts
Bellow you'll see a display of ASA5510 firewall running config. I'm unable to ping inside host computers from ASA5510 CLI. However I can access the internet from a computer connected to the firewall. Please take a look at the running config bellow. I...
Hi, We are implementing new Nagios to monitor our windows devices via WMI. Nagios and our windows servers are behind the ASA firewalls. As WMI is using random ports between 1024-65535 which is a huge range to open on a ASA 5520.Can we use ASA ins...
I'm a newbie - please be patientWe have an ASA firewall that has several DMZ VLANs.A support company that responsible for the SQL Servers wants to use WMI to query server health. Their monitoring server currently on the internal lan, eight SQL server...
Resolved! Is This Normal and What Is Causing It?
Have noticed this today on our Cisco ASA dashboard. What could have caused the lines to be broken? We have no syslog server in place. What else can we do to look into to find the cause? Thank you, Shao
Hi All, I just installed a secondary firewall in act/standby setup and noticed that it seems to be overheating. See the output of show env command below. It seems that the CPU is at 75* but the Chassis fan is just at 2600rpm. And this is on a firewal...
Do i need to purchase 2 x Security plus licenses one for each 5506x to support failover
Have an ASA 5525 running 9.4(4)16 recently upgraded (two weeks ago). Today it started consuming all its memory even upon reboot. At first it started denying ssh and then users complained of VPN tunnels going up and down. When I attempt to SSH I ge...
Hi everyone! I have only one Public IP on ASA 5512-x. Can I setup nat for users in local net and forwarding ports for ftp and mail server with with one public ip? Is this possible ? Maybe somebody had a simultaneous situation?
Resolved! IPS policy on ASA5555-X
Hi, We have installed IPS license on our pair 5555-X ASA and created new ips policy which shows approx 30,000 signature when applied. Can some one advise what is the best way to implemt this IPS policy with less numbers of signatures or its ok to imp...
Hi I work in Security team and our network team is responsible with Company Firewalls .they dont really use CLI at all for configuration changes on the ASAs and I was wondering if there is a way we can receive any syslog messages or alertswhen they m...
Hi all, I'm trying to get my FTD appliance to talk IPv6. It's a 5506-X appliance connected to an xfinity home service (so small environment). The FTD appliance doesn't pick up an IPv6 address and I'm curious as to why that is. According to the carr...
So, I can forward UDP ports 4500 and 500 with no issues. But when I attempt to forward AH, ESP, and GRE, it rejects the NAT commands. In sites where I have a /29, this is easy, I assign static NAT, allow traffic, done. So, one global IP address on ...
I have the Anyconnect vpn profile configured to use 2 internal windows DHCP servers as the IP address assignment server. I can VPN in and get IP just fine, the subnet network address is 10.180.160.0/24. However, looks like Cisco ASA is using RFC 19...
Hello folks, I am training myself (with youtube) on how to use a Cisco ASA 5505. I just created a site to site VPN to my Palo Alto 200 from ASDM wizard. The tunnel is up and green according to PA but unable to ping any local IPs from either side. ...
