have an ASA I recently upgraded from old code to newer 9.2 In the old code I would add the following static... static (inside,dmz) 192.168.100.0 192.168.100.0 netmask 255.255.255.0 This would allow hosts in the dmz (with appropriate accompanying ac...
Forum Posts
Hi Everyone... I have a strange issue that I have been struggling with for the past 2 weeks. I have a Cisco asa 5505 running 9.1.6 (I updated to latest version to see if it fixed issue, but it did not). I am trying to setup a site to site VPN tunnel...
Trying to upgrade this one 5505 from 8.2.1 to a current (and patched for the recent RCE/DoS vulnerability) version. I have done 3 or 4 others this week but this one is giving me problems. I tried to go from 8.2.1 to 8.4.6 to 9.2.4.25 which I belie...
Hi all I have1Cisco ASA 5525x, 1 3900 Router and 2 Internet connections. what is the best deployment method to supported what I have. 1. Should both Internet connections connect to Firewall Interfaces ? 2. Should Both Internet connections connect...
Hello! Currently we have a existing FPR2110 and all the network is operational. For some reason we do not want the HA setup but want the addtional new FPR2110 firewall to be setup exactly like the existing one. Also note existing firewall is being ...
Whats the best approach to block torrent....keeping in minf that i dont have pix/firewall but router
Resolved! Clientless SSL VPN License SKU
Does any one the correct the Cisco SSL VPN Clientless part number/sku number? It appears that there may be 10 users minimum for this (see attached) https://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/vpn/asa-vpn-cli/webvpn-lice...
Hi We used FirePower Service on two ASA 5555x. but I just Installed FTD service on it. I Wanted to ask if it was possible to activate clustering on these two ASA. Thanks for advisng me.
I accidentally deleted all of the NAT rules on my ASA and now I no longer have internet access. What am I missing here, is there a default rule I deleted by accident? I have an outside interface and inside interface configured. I am unable to get o...
Hi, I need to upgrade to at least 9.4.4. Can I do it directly? Or what roadmap is needed?Another question is which is the latest version recommended for the ASA 5520? Kind regards, Ana Cal UAberta
Hello everyone! I'm new to this forum, and i'm not sure if this question is in the right place, so sorry for the noob question. I'm studying ACL, and making some practice with Packet Tracer. I'm trying to configure a packet filtering router in packet...
hi all, just moved this from generic firewalling category into here... Dear all,is it possible to measure via FMC (platform 5545-X, running FTD 6.2) the following?1. total inbound youtube traffic within specifed time range (eg. 10Tbytes of inbound t...
Cisco states the below exerpt regarding vulnerability to CVE-2018-0101 To be vulnerable the affected device must have Secure Socket Layer (SSL) services or IKEv2 Remote Access VPN services enabled on an interface. Regardless of the features, you ca...
Resolved! manual Static NAT using Object Groups
object-group network obj-Costumernetwork-object host 100.100.220.10network-object host 100.100.220.20network-object host 100.100.220.25 object-group network obj-Internalnetwork-object host 10.2.2.10network-object host 10.3.10.10network-object host ...
Good Day Is it possible to apply an internal CA certificate to an ASA internal interface and SSL VPN feature? If so how does one go about doing so?
