I have two ASA 5512-Xs running 9.8.(2) in multi-context mode. I have Untrusted customers reaching the internet via our core and am using crypto-maps to isolate whatever traffic they send as it passes though our core. I set up a quick model to test th...
Forum Posts
I was wondering if anyone knows how to add ip addresses to these lists. If you have an ip address in a connection event,you can right click it and choose "add to Whitelist" or "Add to Blacklist" I have an ip address that i know is malicious, but the...
Resolved! A/S ASAs with a 3850 stack
Hello! I am having some issues in an ASA active/standby pair (5516, 9.8), connected to a 3850 stack. The primary ASA is connected to switch 1 of the stack, the secondary to switch 2. What I am facing are the interfaces on the secondary ASA being in a...
I have an ISR 4431 that I have setup with a Zone Based Firewall. I have an Internet Port with a public IP and have created a zone called Internet. I create a zone pair between Internet and Self and blocked everything except 2 IPs I have an ACL. Howev...
Hi all, After i set the traffic through the module and added the firepower device to the defense center . In analysis > context explorer , it shows me that no data.Can i see the traffic in the defense center? Thank you
Hello, I am using a Cisco ASA 5506-X with FirePower. As of Firmware asa971-16-lfbff-k8 it is possible to bridge multiple physical interfaces to i.e. overcome the shortage of switching capabilities on the GigabitEthernet ports. With that being sai...
Dear Support, Customer is asking to hide their proxy public ip address (say 1.1.1.1), and see if its possible to translate this public ip address to 32 different public ip address evenly. The purpose to do that is that in certain country, there is r...
Resolved! LDAP and GPOs through ASA 5540
Hi All, I am experimenting with an ASA 5540 running 8.0(2). The inside interface faces our network with Windows 2008 R2 domain controller and the outside (not really the outside, just separated network with lower security setting) faces some work...
Resolved! NAT Operations question urgent
we are doing an migration so added another inside_2 interface, BGP is running between ASA and routers on both sides. now there are around 50 Static NAT Twice entry in place with #nat (inside,ouside) now in migration activity we need to point same na...
So whether i try to issue a NAT command in the CLI, or even using the startup wizard to setup PAT, i get an error every time. Then i try to just create new NAT entries and have the same problem. If i leave source and destination as any, the command w...
Resolved! Does ASA FTD support Anyconnect VPN ?
Hello, We are currently have a Cisco ASA 5512. We are looking to procure the FTD protection license to have features like DOS protection (Rate limiting) , URL filtering etc. Reading online i think the latest FTD software version is 6.2.2 What happens...
My firewall isn't accepting the no shutdown command even i don't have any option to go into config t mode, i'm sharing show run information with you guys so you can help me in this regard. All interfaces are shutdown state except mgmt int. This probl...
Resolved! Redundant inside interfaces on ASA 5505
My customer is running an ASA5505 with 8.3 code.The have a somewhat flaky proxy between their inside LAN and the firewall. I'd like to have a configuration as follows:LAN > Proxy > VLAN 1 (eth0/2) on ASAandLAN > VLAN 1 (eth0/3) on ASASo that in th...
Hi , Can any one help me to find where to download version 9.1.7.23 for ASA 5515 ? Thanks
We had some routing issues and during our troubleshooting, we found that our wireless guest network is routing over our primary outbound interface. We have a backup outbound interface configured on the ASA, there are two outbound interfaces. We wo...
