I have multiple DMZ servers in seperate interfaces on my ASA with the same security level defined. I notice that if I do not check the box "enable traffic between two interfaces with same security level", then I cannot communicate between two servers...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(84) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,512) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(139) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,165) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Management Center (FMC)
(3) -
Cisco Secure Firewall Threat Defense (FTD)
(2) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(18) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,567) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(319) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(91) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,553) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Open Source and Open Standards
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Automation Analytics Topics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(5) -
Other Firewalls
(1) -
Other IP Telephony
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,769) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(624) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(25) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hi, I have a requirement of allowing Firewall access for 2 Cloud based Applications, from a restricted vlan on LAN. Currently, the vlan is provisioned access only to an specific Citrix Application URL. Apart from that, the access now need to be provi...
Resolved! Firepower/Firesight Compatibility Matrix
I would like to upgrade our firepower modules as well as our firesight management console. Our modules are running 5.4.0.3-37 and our FMC is running 5.4.1.2. Is there a compatibility matrix that defines which modules are compatible with which FMC ver...
I have internal CA and ASA with firepower services. After I applied SSL policy (decrypt- resign) I have a certificate issue. I need your advise. I think I have an issue in firepower certificate. How do i configure the firepower to decrypt the traffic...
Hi, I have a very odd problem, since I established a DNS policy in my FMC to prevent malicious DNS responses, I detected that my ESA is making querys to a malicious site. Those are being block by the ASA, but still...... why the ESA is making those...
Hello team, We would like to know the posible reasons that could cause that cisco ISE shut down, and how can we check the crash logs to figure out. Thanks and regards.
Resolved! SVI communication through ASA
Hello, Following is the scenario; ASA interface gi0/2 connects to a 3750 switch on gi1/0/9,gi1/0/9 on 3750x is trunked to permit all. gi2/0/11 on 3750x links to a 6500 switch on Te5/11 & is trunked to allow all.This 6500 has an SVI 15 which needs ...
Hi, I have a 5505 with ios 9.1(6), that's usually used for internet, i.e. clients on inside can surf internet according to ACLs. All is working. Then I have a Tomcat server listening on port 8080 that needs to be exposed on internet. I'd need to ...
Just wondering how I can install a SSL certificiate from GoDaddy is it was renewed directly on there. The CSR was not regenerated on the ASA and the system admin just chose to renew the SSL Certificate on the GoDaddy's admin panel directly and provi...
I can't find any documentation that this is doable. It seems that I need to burn one of the 8 ports to manage the logical ASA directly.
Hi, Our customer is a small buisness setup below 50 users, they are currently having an AZUS router normal connected to an old 3Com ethernet switch. they asked for upgrade of network with security. so i suggested them Cisco ASA 5506X and cisco smb 30...
eStreamer client written from scratch in python. CLI version with CEF plugin and JSON plugin. Couple of outstanding bugs. Some non-ascii text showing up in packet payload field. Same code as used in eNcore for Splunk. Send feedback for encore4ce...
Hello Team, Whenever we have wanted to upgrade from version 8.4/8.5 to 9.1 we have had problems with NATs and had to perform a downgrade. Do you know if there's a problem? With the vulnerability recently discovered we need to perform this upgrade. ...
Hi, We have the FTD and FMC connected over the management ethernet interface. We have licensed the device via FMC. This is a 2120 FTD appliance. We are trying to setup SSH for the FTD appliance for troubleshooting purposes. We are following the pro...
Resolved! Convert FTD to ASA OS (FPR4140)
I have a FPR4140, it is running FTD, now I want to transfer it to the ASA OS.Can anyone please give me material to do this.Thanks very much.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
