object-group network obj-Costumernetwork-object host 100.100.220.10network-object host 100.100.220.20network-object host 100.100.220.25 object-group network obj-Internalnetwork-object host 10.2.2.10network-object host 10.3.10.10network-object host ...
Good Day Is it possible to apply an internal CA certificate to an ASA internal interface and SSL VPN feature? If so how does one go about doing so?
Dear all, I have a cisco asa vers. 8.4(2)8 with 2 outside interface. I need to redirect the traffic form only 1 host to use a different outside interface. I explane better Outside1 = internet traffic Outside2= single host traffic I tried to create ...
Hi I have active standby 5585 ASA. I have orders 20 license for context. but when I activate the license I get an error that the system: the Serial number is correct. below is the error : ERROR: The requested activation key was not saved because it...
I am just wondering if you can create a static NAT with Port Translation (using the outside interface) and use the same inside server for two different tcp services and another inside server using a third tcp service. For example, from this guid...
Hi folks, I'm looking for a little bit of clarification about the throughput of my ASA5580-20-BUN-K9 since I checked documentation from Cisco and says "Firewall Throughput: Up to 5 Gbps (real-world HTTP), 10 Gbps (jumbo frames)" but I'm suspecting th...
Hey All, It seems Cisco made decision to go with FTD as only image for NGFW. Is anyone here who alrady implemented FTD across company (not pilot, not single firwall) ?
The docs say only VMware vSphere/ESXi 6.0 is supported. https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html Anyone has any luck or issues on running Firepower on VMware vSphere/ESXi 6.5, though? We re...
i know it's a weird question but we are a small ISP and we have a cisco Core switch 6500 with FWSM "ws-svc-fwm-1" since more than 11 years now, and suddenly the managment go for a pier of fortigate box, so kindly is there a way to migrate all the AC...
I have two ASA 5512-Xs running 9.8.(2) in multi-context mode. I have Untrusted customers reaching the internet via our core and am using crypto-maps to isolate whatever traffic they send as it passes though our core. I set up a quick model to test th...
I was wondering if anyone knows how to add ip addresses to these lists. If you have an ip address in a connection event,you can right click it and choose "add to Whitelist" or "Add to Blacklist" I have an ip address that i know is malicious, but the ...
Hello! I am having some issues in an ASA active/standby pair (5516, 9.8), connected to a 3850 stack. The primary ASA is connected to switch 1 of the stack, the secondary to switch 2. What I am facing are the interfaces on the secondary ASA being in a...
I have an ISR 4431 that I have setup with a Zone Based Firewall. I have an Internet Port with a public IP and have created a zone called Internet. I create a zone pair between Internet and Self and blocked everything except 2 IPs I have an ACL. Howev...
Hi all, After i set the traffic through the module and added the firepower device to the defense center . In analysis > context explorer , it shows me that no data.Can i see the traffic in the defense center? Thank you
Hello, I am using a Cisco ASA 5506-X with FirePower. As of Firmware asa971-16-lfbff-k8 it is possible to bridge multiple physical interfaces to i.e. overcome the shortage of switching capabilities on the GigabitEthernet ports. With that being sai...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 08-10-2026 08:58 AM | ||
| 08-10-2026 02:48 AM | ||
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM |
| User | Count |
|---|---|
| 4 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
