Hi friends,I'm having a strange problem... I'm using one of my public ip addresses for a static NAT rule to access a PC in subnet of my LAN. From internet I have full access to that PC through public ip address, so far so good. The problem is that I ...
Forum Posts
Hello, One of my clients still has their ip addressing scheme assiged to public addresses. The inside/LAN segment (end-stations and servers) are assigned a public ip subnet(using this subnet as an example: 173.168.157.0/24). The DMZ segment is assig...
Hi, We are migrating from a 5510 platform to a 5516-x platform. We tried the backup and restore feature of ASDM which to partially work. This is because the interface names on 5516-X are GigabitEthernet while Ethernet on 5510. Hence a different crypt...
Resolved! ASA 9.8(2) support for FirePower 2110
I'm in the midst of working with a VAR to replace 5510s with 2110s and it's just been 1 caveat after another with these devices; mainly VPN. Then today, I received a Cisco software update notification for the 2110s with ASA code 9.8(2) listed. I deci...
Resolved! FTD 6.2 BGP AS-Override
Hi, its possible to configure as-override for BGP in FTD? I dont find the right option in the Management Center. FlexConfig is not possible. Kind regards, Michael
Hi All, My first post on the new look forum. OVERVIEW OF PROBLEMIn our current network, we have a Freepbx SIP server with an ASA5510 facing the internet and a 3750 LAN side with 5 VLANs. Voice has its own VLAN. We are introducing a second ISP connec...
Resolved! Deplyment ACS 5.8 secondary instance
Hi:I have one simple question, I want to implement a secondary instance to my server ACS. Those servers have to be in the same network?? This is necesarry for replication?.Because right now each one have its own net. Thanks.
We have around 150 remote offices, each with at least two broadband connections; the original goal 10+ years ago was to use separate connections (one for staff and 1+ for customers) to minimize cross-traffic affecting performance and stability. Our o...
Hi AllAnyone can I help me?The LAN have 0ne ASA5525 cisco external firewall,two 3650 cisco switch for DMZ directly connected to external firewall. Two 4503 cisco switch for collapsed switch directly connected to exiternal firewall in the inside part...
Hi AllAnyone can I help me?The LAN have 0ne ASA5525 cisco external firewall,two 3650 cisco switch for DMZ directly connected to external firewall. Two 4503 cisco switch for collapsed switch directly connected to exiternal firewall in the inside part...
Hi. I have configuration like in the attached picture. I have 2 ISP. Both are sending me default route 0.0.0.0 to the Internet. ISP1 is primary, ISP2 is backup.BGP is working fine on 3560, I can see those routes. But the traffic from VLANs first sho...
Resolved! Port forwarding on ZBF is having issue
I am trying to configure Port forwarding on ZBF (Cisco 2911) router. I am facing the issue: I am getting following error message in in-zone to out-zone. I am getting following error msg- 10.10.10.XX:443 2.50.49.187:52118 on zone-pair ccp-zp-in-out cl...
Can someone help me out with this problem? We currently have 1 ASA in Datacenter 1 and are trying to implement a second firewall in another Datacenter. The interconnectivity between the Datacenters is fine, but i'm getting the "Failed to locate egres...
Gents, Is there any benefit of having the appliance operational considering it has old signatures that may still block some attacks?. The IPS device has no Cisco SmartNet contract and no signature releases supported by Cisco. Please advise,
I created a VPN tunnel from a Cisco 2911 to a sonicwall TZ series. The tunnel shows up and active on both ends but I cannot ping either side nor remote desktop etc. Not sure what I'm missing to allow traffic both directions. Any help as always is app...
