Network Security

Cisco ASA cannot ping to external dmz hiosted address

Hi Having a problem where I cannot get icmp working from internal to external addresses that are hosted in my DMZ ( see atatched diagram ) Essentially my nat rules look right as the system actually works to a point . However if I allow a rule on t...

Unable to load newer ASA or ASDM on ASA 5515.

I started upgrading my ASA from firmware 8.6 and I forgot what version of the ASDM was. I went in incremental updates, but now I am stuck and it will not go any further than ASA Version 9.0(2) and ASDM 7.4(1). When I try to upgrade via the wizard, i...

Cisco ASA 5512-X can it handle 3 ISP's in PBR per this scenerio?

Hello all, Can a Cisco 5512-X handle this scenerio? Physical Port 1 - ISP 1 (primary MPLS for VOIP) Physical Port 2 - ISP 2 (primary for Internet, data and vpn connections) Physical Port 3 - ISP 3 (backup connection for internet, data and vpn conne...

Resolved! What is "Maximum Concurrent Sessions" in Cisco ASA 5585-X SSP-10 w/ FirePOWER Services?

Hi, I'm new with Cisco ASA and FirePower. From the datasheet provided by Cisco.com, there is said that maximum concurrent sessions in Cisco ASA 5585-X SSP-10 w/ FirePOWER Services is 500,000. What does the maximum concurrent sessions mean? And how to...

Firepower Threat Defense (FTD) with dual WAN links

Hello, I would like to know whether Firepower Threat Defense (FTD) 6.0.1 supports dual WAN links fail-over ? or WAN links load balancing feature ? Seems I can't find any guidelines to configure it. Thanks, Roy

Cannot ping inside interface via site-to-site VPN

Hi ALL, I have setup a site-to-site VPN between HQ and branch. I am able to ping those segment behind Cisco ASA 5506-X (branch) from segment behind SonicWALL (HQ). But cannot ping inside interface (192.168.101.2) in Cisco ASA. Need your advise. bran...

ASA5512 v9.4.2 AD Integration for Firewall Policies

Hi I have Cisco ASA 5512 with version 9.4.2 running and I am integrating it with the MS Active Directory. I have created the firewall for AD agent and configured aaa-server for ldap also. The ASA is communicating with AD agent with success but once ...

Firesight user mapping issue with mobile devices

In a previous post i was able to figure out why firesight was not mapping users to hosts correctly. now i have a different problem. my mobile users who have email access reside on my internal wifi network. the DHCP pool is the same for our shop co...

firepower configuration missing on 5506

The FirePower configuration button is not visible in ASDM. login ASDM, use the setup wizard, configure the firepower address: 10.55.5.201/255.255.0.0/10.55.5.241 laptop connect to switch, configure the IP address: 10.55.5.202, ping 10.55.5.201 is o...

ASA-1-713900 construct_qm_hash() : Unknown hash algorithm

We are getting the below error message from the ASA in our syslog server, A"SA-1-713900 construct_qm_hash() : Unknown hash algorithm" Is it just a Alert ?, how to identify which tunnel it is getting affected because of the above error message, Tha...

ASA5005 problem: Host connected with it cannot go to internet

The topology (see the jpeg attached) is as follows: [HOST](192.168.2.2)------(192.168.2.1)[ASA 5505](192.168.1.100)------(192.168.1.1)[ROUTER]-------[INTERNET] The host cannot go to internet, instead ASA can go. Host can ping ASA gateway (192.168....

Resolved! Standby IP in Active/Active Failover

Hi, I am running Active/Active Failover between 2 x 5516. Transparent and Routed Contexts. For my BVI Interfaces in transparent mode context do I need to assign a standby address? If so, what does this achieve? I currently have one IP configured un...

has firepower threat defense 6.1 unified image been released yet?

hello has the 6.1 image been released yet? August 25. Can t find link anywhere but cisco live mentioned it would be out end of July .

ASAv AWS GovCloud

Hi all, I'm trying to find information on deploying a virtual ASA to Amazon AWS GovCloud. GovCloud doesn't have access to the AWS Market Place, so I believe that I have to deploy it manually. Is there any documentation on the steps required, or has...

cisco Firewall

What is difference Between Cisco Firepower NGFW vs Cisco ASA with FirePower Services.

Network Security

Forum Posts

Cisco ASA cannot ping to external dmz hiosted address

Unable to load newer ASA or ASDM on ASA 5515.

Cisco ASA 5512-X can it handle 3 ISP's in PBR per this scenerio?

Resolved! What is "Maximum Concurrent Sessions" in Cisco ASA 5585-X SSP-10 w/ FirePOWER Services?

Firepower Threat Defense (FTD) with dual WAN links

Cannot ping inside interface via site-to-site VPN

ASA5512 v9.4.2 AD Integration for Firewall Policies

Firesight user mapping issue with mobile devices

firepower configuration missing on 5506

ASA-1-713900 construct_qm_hash() : Unknown hash algorithm

ASA5005 problem: Host connected with it cannot go to internet

Resolved! Standby IP in Active/Active Failover

has firepower threat defense 6.1 unified image been released yet?

ASAv AWS GovCloud

cisco Firewall

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Packet tracer says NAT pool exhausted

Cisco FTD send RST when dropped by Snort / IPS

Firepower 7.2.1 - Issue with the FlexConfig Text object override

Private VLAN's interaction with ESXi and firewall

Packets appearing in ASP DROP?

FMC new local admin cannot console or SSH

FMC API - can not associate a prefilter policy to an access policy

What is the result of placing, on ASA outside int, ACL...

On ASA5525 with vanilla setup, need to place ACL on outside int?

CSR 1000v ACL syntax-- use wildcards or masks?