I'm trying to get my ASA 5506 to route traffic for 192.168.24.0 to 192.168.25.20 however it keeps blocking the traffic with the global deny rule Deny inbound icmp src inside:192.168.25.6 dst inside:192.168.24.1 (type 8, code 0) i have attached the r...
Forum Posts
Resolved! Cisco ASA 5510 Management Port
ASA 5510 Management PortHello, I'm facing problem configuring management port on ASA. I'm able to ping it only through VLAN 2 but not from any other VLAN and I want to get it assessible from all vlans. In addition I want to setup ASDM access through ...
Consider the following topology: - 192.168.1.1 /24 is on the ASA1 side (Gi0/1, lets call this the "Inside-ASA1" if you want)- 192.168.2.1 /24 is on the ASA2 side (Gi0/1, lets call this the "Inside-ASA2" if you want)- Interconnectivity between the ASA...
Hello, I have a question regarding Cisco FTD and client VPN with AnyConnect.Is it possible to configure compliance rules for FTD VPN Clients and quarantine a host if it is not compliant?Thanks in advance.Regards.
I have a scenario about Policy static NAT in ASA 9.6 I have server listening on port tcp/8443. It will be accessed from specific networks in internet. I want to NAT my server to public IP but port specific only for those specific networks in internet...
Hi, we are migrating from the Cisco FWSM > Cisco ASASM, the FWSM is operating in transparent mode and we are using multiple contexts, the local MSFC is providing layer 3 services via appropriate SVI's. As this is part of a larger scale migration str...
Hi All, where do you install the agent for user mapping ? I understand it must be AD,if so does that mean all ADs? how about if you use NTLM, does the browser automatically authenticate the user using their current session? Thanks
What is the best way to deploy Cisco ACI with ASA on multiple sub-interface. For example in our traditional networkWe have Core switch that works as L2 & L3 for the network. It has Layer 2 trunk (with all allowed vlan for sub-interface) connecting to...
I have an ASA-5505 not an ASA-5505X and they haven't updated the software in a couple years. The last date of hardware support is 2022. Have they stopped updating the software already?
Resolved! Route Traffic
Hi. I would like to request some help with the following case I have. I need to route all the Internet traffic to the Router 1. In the Firewall 2 I created the following route route 0.0.0.0 0.0.0.0 10.154.242.9 1 After that I dont know what else do I...
Hello Community, We have just completed a Clients full upgrade from old ASA's to new 5555-x with full features of FireSIGHT and FirePOWER on ASA, while everything is working as designed we have one issue, This client wanted a single unit to do his UR...
Hi friends,I'm having a strange problem... I'm using one of my public ip addresses for a static NAT rule to access a PC in subnet of my LAN. From internet I have full access to that PC through public ip address, so far so good. The problem is that I ...
Hello, One of my clients still has their ip addressing scheme assiged to public addresses. The inside/LAN segment (end-stations and servers) are assigned a public ip subnet(using this subnet as an example: 173.168.157.0/24). The DMZ segment is assig...
Hi, We are migrating from a 5510 platform to a 5516-x platform. We tried the backup and restore feature of ASDM which to partially work. This is because the interface names on 5516-X are GigabitEthernet while Ethernet on 5510. Hence a different crypt...
Resolved! ASA 9.8(2) support for FirePower 2110
I'm in the midst of working with a VAR to replace 5510s with 2110s and it's just been 1 caveat after another with these devices; mainly VPN. Then today, I received a Cisco software update notification for the 2110s with ASA code 9.8(2) listed. I deci...
