Hi, vpc is running in datacenter ( its not really double sided or single sided ) . Need to put dc firewall ( asa with source fire ) What is the best practices . L3 or L2 Thanks
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(10) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(2) -
APIs
(1) -
Appliances
(17) -
ASA
(1) -
Branch Router
(1) -
Buying Recommendation
(81) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,338) -
Cisco Bugs
(63) -
Cisco Cafe
(15) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(140) -
Cisco Firepower Device Manager (FDM)
(768) -
Cisco Firepower Management Center (FMC)
(2,700) -
Cisco Firepower Threat Defense (FTD)
(2,986) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(57) -
Cisco Secure Firewall Management Center (FMC)
(282) -
Cisco Secure Firewall Threat Defense (FTD)
(340) -
Cisco Security Cloud Control
(17) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(21) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(45) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(2) -
Community Bug or Issue
(1) -
Community Feedback Forum
(27) -
Community Ideas
(12) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(238) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(14) -
Firepower Management Center (FMC)
(383) -
Firepower Threat Defense (FTD)
(206) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,051) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(8) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,519) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(6) -
License
(307) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(88) -
Network Security
(2) -
NFVIS
(1) -
NGFW Firewalls
(37,235) -
NGIPS
(1,794) -
Online Tools and Resources
(1) -
Open Source and Open Standards
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Automation Analytics Topics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(3) -
Other Firewalls
(1) -
Other IP Telephony
(1) -
Other NAC
(18) -
Other Network
(3) -
Other Network Security Topics
(10,662) -
Other Networking
(9) -
Other Routers
(8) -
Other Routing
(22) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Physical Security
(19) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(1) -
Room Endpoints
(1) -
Routing Protocols
(8) -
SD-WAN Security
(1) -
Security
(5) -
Security Management
(566) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(43) -
WAN
(7) -
Web Security
(4) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hello, I have my double nat config as below on an ASA. object-group network inside-host network-object host 10.10.105.41 object network 1st-nat host 6.0.10.49 object network 2nd-nat host 206.125.46.2 nat (inside,outside) source static inside-host 1s...
Hi Team, We are in a middle of deployment of ASA with firepower services and need below documentation for points: Bandwidth consumption between ASA(SFR) and virtual FSMC. Log retention on FSMC virtual. Thanks in advance for any help.
Resolved! ASA 5510 inside hosts cannot connect
I have an ASA 5510 behind a Comcast wireless router. I have set the inside/outside interfaces and the ASA can ping public IPs. However, hosts connected to the inside interfaces do not receive any network info. On Windows 7 it just shows Unidentifie...
Resolved! Cisco ASA 5506x
Dear All, I have a new ASA 5506x, I need to configure site-to-site VPN, do I need to configure the Firepower services first(is it necessary?) in order to config VPN? Regards
Hi, I have installed FireSIGHT virtual appliance and connect to 2 ASA-X devices. In the default FireSIGHT dashboard, I would see the summary of 1st device. How can I view the summary of the 2nd device? Thank you. CM
Resolved! How to configure Firepower
Hi Guys, I am new in Cisco Firewall and got confused on firepower services. I already configured configured ASA 5506-x but then I realized that I forget something and that is the Firepower. On the Configuration tab I didn't see the Firepower Tab. I t...
Hi guys, hope someone can help. I have an ASA with multiple interface and I wish to add an ACL that will block every interface of accessing an IP address. Is it possible to do this as one command or would I need to add an ACL for each interface? This...
Does anyone have a complete list of what parameters need to be enabled/set on a ASA 5505 so MS Direct Access is happy?I can't be the only one wanting to place a 5505 in front of the DA Server.
Hello Team, Some One kindly Provide help to my Cisco asa5516 fpwr k8 Upgrade to k9 version. I Took the 3des/aes activation key from Cisco website...that is via.... Cisco Product Registration->get other licenses->ips crypto other->Seurity products->C...
Hello team, I have installed Cisco ASA5545 with Firepower Services.Firepower is managed via FMC. My issues are my old logs in fmc are overwriting with news logs after 1 month.I need logs for atleast one year. HOw Can i accomplich that?
I am new to setting up an ASA 5505 and am getting a weird issue. I can connect remotely to the VPN and I am given an inside IP address from the address pool but my default gateway is always wrong and always has :: and then the default gateway. Theref...
Does the re-image from ASA IOS to the unified Threat Defense image require an SSD?
Has anyone had experience where traceroute working from VLAN X but from Y? Traceroute works upto default gateway but at ASA, it does not work. policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 ...
Hello. we bought a firepower lice for 5506-x one year service. however, due to some project work we have to delay the deployment for 4 month. my question is if we never use our 1 year lice until next 6 month will we left 6 month to use. or once we re...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 6 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
