we need to be able to traceroute to the internet through the asa, but when the traffic hits the asa i then get requst time out.i can ping but not traceroute, is there an easy fix?
I have a customer with several ASA-IC-6GE-SFP-B= expansion cards. We need to retrieve the serial numbers to add them onto Smartnet support.
Unfortunately it appears that the normal "show inventory" does not report serial number of the cards. The outp...
When I traceroute from internal network, after ASA...I only see * which is annoying.
I found this article.
https://supportforums.cisco.com/discussion/11219676/cannot-traceroute-through-asa
Wouldn't this bring down my network?
ciscoasa#config t
cis...
Hi,
We have purchased a FS-VMW-10-SW-K9, So wanted to know whether we can install any version of firesight defense center or it will be inbuild in the ovi file as purchased
Hi all,
I´m getting more and more familiar with Firepower... Now I have a running setup with 2x ASA 5525x. A main point, that I actually don´t understand is about the network discovery. My firewall is setup in routed mode. It is the gateway for host...
I have a question on managing multi context firewalls in CSM.
Our standard process is to import a multi context firewall into CSM via just the admin context. The http server enable config is only defined on the admin context. And as such, we can ...
Does Cisco have a way to write an ACL to block the opposite of an object-group?For example, I want to write an ACL allowing all traffic other than to object-group Corp_Net... thanks,ttpm
Hi,
I am looking at using a cisco 3750G with an SVI, How do I setup the ASA to route its DMZ interface to the 3750G and still maintain NAT rules?
Bascailly
Outside ---- > ASA ---> Router (3750G) ---> Server
Dears,
I have an IPS (AIP-SSM-10) that is installed on a 5520 FW, The problem is that it does not download the latest update automatically via the cisco.com auto update.
And when i tried to troubleshoot, The message was:
Success: sensor is alread...
Hello,
I'm trying to forward the rdp port from a Cisco asa 5512x, version ASA 9.6
object service rdp service tcp source eq 3389
object network mypc host 10.27.1.164
access-list outside_access_in extended permit object rdp any object mypc
object net...
Hi all,
I'm using ASA5585-X SSP40 (version 9.4.(2)6 ) with Firepower 6.0.1.2. Because of performance issues I've activated AAB for testing purposes. In the documentation I found:
"If detection is bypassed, the device generates a health monitoring a...
Hi,
I have a simple query around access control policy using applications in the rule. If we want to create access control policies with applications is it necessary for configuring the port/protocol information as well. Or can we just use applicatio...
Hello!
I'm trying to perform an upgrade of the ASA 5555-X from version 9.0(3) to 9.1(2), 9.2(4)-5, 9.6(2)-3 and it's failing. The only version I was able to upgrade to is 9.0(4).
According the "Upgrade to ASA 9.1, 9.2 and 9.6" guides, version 9.0(4...
Hi guys,
I have a 5506-X. I am wondering if it can do per-ip shaping. For example if I create an object with the subnet 192.168.1.0/24. Can the ASA limit BW for each IP in the subnet to 1mbps?
Thanks
