Community, Were trying to roll out WCCP and I had some questions that I could not find the answers to online. After reading the following article, although helpful, I did have some questions. https://supportforums.cisco.com/t5/security-documents/asa-...
Hi folks,I have a PC with ip address 172.16.99.22 in my LAN behind INSIDE_Prueba interface of ASA and made a Static NAT rule to access the PC from de internet. It was working fine but suddenly it doesn't anymore. Here're some things that may help:ASA...
Hi, One customer wants to be audited for PCI DSS compliance. They have c2911 routers as WAN routers. When they do port scanning, obviously there are some ports open as routers are doing natting. As far as I know, port scanning cannot be prevented wit...
Hi folks,I'm having trouble with traffic between different subnets connected to different interfaces. In interface CARRIERS is connected a server with ip address 10.227.224.11 and in interface INSIDE_Prueba I have connected my PC with ip address 192....
Hi I have a question regarding Evenyt ID's in Sourcefire. One of the workstations got infected with the following virus and the quarantine says that it failed with the error code: 3221225524. Does anyone have a list of the error codes so that I can f...
Apparently the management interface on the 5525-x doesn’t support syslog. After 2 1 month(s) working on the problem, it works normally on the inside nic of the ASA. (TAC and myself have tried everything it's safe to say)The DOD has STIG compliance re...
Hello,We have bought Cisco FirePower Management Center for 2 devices (FS-VMW-2-SW-K9).Can we buy another license for two devices and expand the existing Management Center?
I am kind of new configuring Cisco Firewalls. I just configured a Firewall ASA 5508-X with Firepower services managed from the ASDM. Now we have purchased the vFMC for VMware deployment to manage the ASA 5508-X Firepower services, and a new ASA 5506-...
I have a Cisco 880 and try to establish an IPsec VPN dialin in combination with zone based firewalling.The IPsec dialin works fine without any issues which was crosschecked before activating the ZFW.ZFW config looks like this:!class-map type inspect ...
Hello, I would like to ask about how to migration Intrusion Policy from VDC to DC750?I had tired import the Intrusion Policy from VDC to DC750, can't import as version mismatch with VDC:5.4.0 and DC750:6.2.1. Thanks for your suggestion! Regrds,Thaung...
Hey all, Somewhat of a silly question when it comes to identity NAT rules, which cause the ASA to use NAT divert instead of the routing rable. How does the ASA determine the next-hop IP address in this scenario? We currently are dual homing our ASA t...
So I need to allow a server in the DMZ to talk to a domain controller on the internal network for authentication. This requires allowing a bunch of protocols through the firewall, some googling I think has given me a comprehensize list. That said, h...
I found one link on cisco website explaining a little about virtual reassembly, what I dont understand is when I enable that option on my tunnel interface why I cannot ping packets larger than 1420 from the other end of the tunnel?? When I disable vi...
Hi Team, We buy Cisco ASA5525-FPWR-BUN (QTY=2), It will be deploy as datacenter with connectivity of coreswitchs(C6807-XL) and server farm switches(WS-C3850-48T-S). Please share the valid design, deploy and configuration Guide. My design attached. T...
Hello; I am Erdenesukh Magsarjav who is system engineer of Civil Aviation Authority Mongolia. Our organization have bought your system which ASA-5585-10CTRL-LIC next generation firewall with FMC. ASA5585 firewall IOS 9.2 version ,firepower version ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
