Hi, I have a Cisco ASA 5525-X running version 9.5(3)9. I encountered a kind of weird issue regarding access-list. For what I know if you are coming from a higher security level going to low, you don't need to explicitly put an access-list to allow...
Forum Posts
At an customer site i have an Site to Site VPN Tunnel. At the Main Office (SiteA) i also have an AnyConnect VPN solution. At Side A the Firewall has two WAN Connections. One connection is for normal internet access and the other is an specific Intran...
I'm doing a trace test but I don under this result, why is it outside to outside? isn't it supposed to be outside to inside? I have a rule for Dest IP.53.117 with service http but it always shows Implicit Rule dropped my packet, why?
Hi, Using BGP Maximum-Prefix Feature I can controlland generate a warning If my router is receiving high number of prefix than configured. Is there any way to do reverse? I mean to generate a warning message if my router is advertising X number...
ASA Version 9.2(2)4 I am having an issue creating NAT to my web server after following suggested sample from this link. Here is my config Webserver:192.168.16.28 Public IP: 80.248.12.189 object network Webhost 192.168.16.28 nat (inside,outside) s...
HI All,I try to do simple static nating .I can see the hits in show nat command output but not able to access the host from outside(internet).In packet tracer i am getting below mention resultPhase: 1Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfi...
Dears, firepower auto recommendation were configured how I will know the difference between the last recommendation and the new recommendation , becz I am facing some traffic drops issue after updating to the latest recommendation. thanks
Hi. I want to integrate FTD 6.2.2 with ISE 2.2 using PxGrid. To do the certification part, I have configured a Win 2008 R2 as my internal CA with just these roles installed. This windows machine is member of my internal lab domain. While I enter...
Resolved! Switches vlans
Dears, On every switch I have a vlan 1 interface in shut state but there are some ports assigned to vlan 1 as the default vlan , is it a high security risk to keep the ports in the default vlan though my vlan 1 interface is shutdown. thanks
Resolved! TACACS+ for Console ASA
Hello all, I am trying to use TACACS for authentication / authorization. My setup is shown below. On the Router, everything works really well. For the ASA, I can ssh, telnet and http with no issues and I am going straight to privilege level 15 (exa...
Resolved! uncategaries URL
Dears, In selected agreed URL list , I have also added uncategorized URL, what are these uncategorized url mean. Thanks
Hi guys, it has been a pain and a year long ongoing process to get Cisco to implement (sorta) switched ports into the ASA 5506. Most of us probably use the 5505 for small branches due to the fact it has a built-in switch. Now while we were all exited...
I have 2 ASAs with LAN failover. Is it possible to configure failover with 2 internet circuits connected to the wan ports? I mean with 2 separate public IP addresses.If so can you send documentation how to configure it?
Hi, im trying allow only facebook and Whatsapp for a specific IP range on Cisco Firepower i got success on Facebook calls audio/video text messeges NOT working whatsapp not working as chat/video/audio i have allowed the applications in the policy rul...
We have a couple of IP addresses listed in the logs as Source IPs that we do not own and we are trying to figure out if theres some sort of reporting issue or deeper dive we can do. Attached is a copy of one of those events.
