Network Security

How to get XLate out of ASA with SNMP

Hi All,We recently replaced out trusty old 3660 NAT router with a pair of ASA5520's. Our service desk used to be able to pull the NAT translations out of the router using SNMP. (CISCO-IETF-NAT-MIB:ciscoIetfNatMIB)We would like to do that same on the...

Resolved! Best practise: Internet connection direct or through a router?

Hi, So to date I have always had my own router between the firewall and the ISP connection. There have been many legacy reasons for this however they have all disappeared. So now I have two internet connection purely for failover. I know I can plugge...

Multiple multiple emails with no esmtp inspection

Hi all, I'm running into an issue where we are receiving multiple duplicates of emails (E-Mail volume increasing 10 fold) in our domain. Working with our filtering provider they are saying it is an issue with esmtp inspection / fixup smtp settings on...

Resolved! object-group nat

Hi, Looking for a way to avoid using separate objects that are already in an object-group for dynamic nat outbound via interface. object network one subnet 10.0.0.0 255.0.0.0object network two subnet 172.16.0.0 255.240.0.0object-group network one-tw...

ASA 5525-X generating Failover Primary Closed (302014)

I continually receive the below syslog message and need some guidance on troubleshooting to resolve the error. I looked through the syslog meanings and Cisco states no action required. This message occurs continually throughout the day. Any help is...

Firepower Excluding a host from Rule action

Greetings, I come from a Tippingpoint background and am now working with Firesight/Firepower. We have hosts that trigger an HTTP rule that is set to Drop. The traffic is valid and we do not want to drop it for this rule but we need all other http tra...

Resolved! Is there a way to see your ASA's backup DEFAULT route?

Hi, We have SLA monitoring set up to ping a Google DNS server with the IP address of 8.8.4.4. We also have a default route pointing to the next hop of our primary ISP. If that primary ISP failed then we would want traffic to fail over to the secondar...

ASA5506-X with FIREPOWER trial license?

Hi,Are there any trial licenses for the ASA 5506-X for the using IPS, URL, Apps, and AMP subscriptions?What I loved about the ASA 5500-X series running the CX module, was that it had a trial license built-in to use those services. Great and about ti...

hi-cpu usage

after we upgrade the firepower to 5.4.0 we notice that the cpu usage went high. what would be the cause?

Firesight Management 5.4 software - Required Vmware and Server Details

Hello Everyone, I want to install Deploy a 5.4 FireSIGHT Management Center in order to manage SFR module on Cisco ASA 5515-X firewall. I downloaded the OVA file from Cisco website and this need to be install on VMware (Vsphere) ESXi 5.1 or 5.5 as pe...

ASA 5510 Failover & Licensing

Hi, I have recently been given a second ASA 5510 firewall and was wondering how the licensing works for using this in a failover solution ? I already have a ASA 5510 firewall which has Security Plus license and is under maintenance and wanted to try ...

Firesight or CSM

Customer wants to manage his ASA devices, he also want to use Prime infrastructure. For the ASA I can choose the CSM (which is "outdated" I think) or the Firesight manager. What should I advise? I know you can configure in the CSM, but as a workaroun...

FS-VMW-SW-K9

please i need to know when i add FP7125-BUN i must to add FS-VMW-SW-K9 to manage ? or can i add FS-VMW-2-SW-K9 to mange two devices only ?

Which VMware software is Required to install Cisco ASA firewall management software(OVA file)

Hello, I would like to know Which VMware software is Required to install Cisco ASA firewall management software(OVA file).

policy static nat question / Error in Cisco's configuration guide?

I implemented a policy static nat identical to the following example that is listed in page 12-13 of the Firewall Services Module config guide. hostname(config)# access-list NET1 permit ip 10.1.2.0 255.255.255.224 209.165.201.0 255.255.255.224hostna...

Network Security

Forum Posts

How to get XLate out of ASA with SNMP

Resolved! Best practise: Internet connection direct or through a router?

Multiple multiple emails with no esmtp inspection

Resolved! object-group nat

ASA 5525-X generating Failover Primary Closed (302014)

Firepower Excluding a host from Rule action

Resolved! Is there a way to see your ASA's backup DEFAULT route?

ASA5506-X with FIREPOWER trial license?

hi-cpu usage

Firesight Management 5.4 software - Required Vmware and Server Details

ASA 5510 Failover & Licensing

Firesight or CSM

FS-VMW-SW-K9

Which VMware software is Required to install Cisco ASA firewall management software(OVA file)

policy static nat question / Error in Cisco's configuration guide?

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Change IP address of FMC HA standby node

FTD Multi-Instance Data and Data-Sharing Interface

Firepower integration with Openldap

Adding Clustered node in SNMP manager gives error duplicate name

loug user out by himself

Internal Server Error and Certificate key usage inadequate for attempt

Where to migrate SFR redirect rules on FTD appliance

ASA 9.6 Global Inspect Policy

How to deploy Cisco Firepower Management Center?

Cisco FTD send RST when dropped by Snort / IPS