I'm having a hard time "tracing" how ACL's on subinterfaces on a Cisco ASA work. Let's create a simple scenario:- ASA Gi0/0: trunk to SW01 Gi0/0- ASA Gi0/0.10: VLAN10 subinterface- ASA Gi0/0.20: VLAN20 subinterface- SW01 has both VLAN's and Gi0/0 con...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(2) -
APIs
(1) -
Appliances
(17) -
ASA
(1) -
Branch Router
(1) -
Buying Recommendation
(81) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,336) -
Cisco Bugs
(61) -
Cisco Cafe
(15) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(139) -
Cisco Firepower Device Manager (FDM)
(768) -
Cisco Firepower Management Center (FMC)
(2,700) -
Cisco Firepower Threat Defense (FTD)
(2,986) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(55) -
Cisco Secure Firewall Management Center (FMC)
(276) -
Cisco Secure Firewall Threat Defense (FTD)
(330) -
Cisco Security Cloud Control
(17) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(20) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(45) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(2) -
Community Bug or Issue
(1) -
Community Feedback Forum
(26) -
Community Ideas
(12) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(238) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(14) -
Firepower Management Center (FMC)
(383) -
Firepower Threat Defense (FTD)
(206) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,051) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(8) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,519) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(6) -
License
(307) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(87) -
Network Security
(2) -
NFVIS
(1) -
NGFW Firewalls
(37,235) -
NGIPS
(1,794) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(3) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,661) -
Other Networking
(9) -
Other Routers
(8) -
Other Routing
(22) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Physical Security
(19) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(1) -
Room Endpoints
(1) -
Routing Protocols
(8) -
SD-WAN Security
(1) -
Security
(4) -
Security Management
(565) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(27) -
VPN and AnyConnect
(1) -
Vulnerability Management
(43) -
WAN
(7) -
Web Security
(4) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hello everyone, I am in the process of upgrading the flash via EUSB on one of ISR 4331 routers. Does anyone have any experience performing this upgrade and can provide detailed instructions for upgrading the EUSB. I have researched Cisco's site a...
hi all, I have pair of 4110 in another site accessed via VPN.is there any port or specific protocol that should be allowed on VPN so FMC can communicate with the FW? the FW registers, it goes through discovery and de registers on FMC due to communic...
If someone could please help, I would appreciate it. This tunnel reports up (via show vpn-sessiondb l2l). But no traffic will pass. Seems to get denied at Phase 2. Something wrong with ACL it says. I'm not seeing. Wizard wrote the config includ...
Resolved! ASA 5506 issue
I have a very simple configuration; however, the two same security level interfaces cannot talk to each other. I have had a TAC case open for 2+ weeks and I’m at the point of frustration. Should I blow the configuration away and try again? Everythi...
Hi networkers,I recently run a pentest against a 2911 router. It mentioned the following message:[quote]Vulnerability allows remote attackers to force the downgrade to an unintended cipher. OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_O...
Resolved! Firewall Blocking Dns Resolution
Hi Team, I just configured an ASA 5516 at one of our client's office, It is below the edge router (not directly connected to the internet). I created three zones (LAN, OUTSIDE AND SERVERS). The OUTSIDE interface is connected to the edge router and th...
Hi Guys, Good Day! I am a bit new in Firepower, may I know how does FP do hardware HA, is it like ASA? We can have Active/Standby and all configurations should be only on Active appliance? What FP monitors to trigger the failover? Thanks
Join Foster Lipkey, Cisco Technical Leader within the Technical Assistance Center (TAC), as he walks you through several advanced troubleshooting scenarios with FTD.Choose one session to attend (content same for both).August 24th at 10AM PTAugust 31s...
Join Foster Lipkey, Cisco Technical Leader within the Technical Assistance Center (TAC), as he walks you through several advanced troubleshooting scenarios with FTD.Choose one session to attend (content same for both).August 24th at 10AM PTAugust 31s...
Does anyone knows, why Cisco ASA ASDM in monitor routes shows a route but in Configuration--> static routes doesnt show this route. please help. Even in show running-config, doesnt shows this route. Thanks
Resolved! FIREWALL BEHIND ROUTER NAT ETC
Hi I really struggling with a topology that consists of a firewall behind a router could anyone help/explain the below question If the network between the firewall and the router was a private address ie 10.x.x.x and the internal private subnet was...
Hi Team, unable to add the device in FMC
hi everyone, Here is setup traffic is coming from DMZ to inside and ACL is there to allow it. Source 192.168.134.186Destination 10.71.30.61 Packet tracer show packet-tracer input dmz tcp 192.168.134.186 1024 10.71.30.61 636Phase: 1Type: CAPT...
Hi, does anyone know if specific ports are required to be opened when using pxGrid on the FMC to communicate with Cisco ISE Thanks in advance.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 09-24-2026 02:14 AM | ||
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
