Hi, For an ASA Outside Interface (which has no inbound services as such) is there a need for an ACL on the Interface? It provides NAT only and access to the Outside world is locked down Inbound on the Inside Interface. All return traffic would be all...
I am trying to add my AIP-SSM sensors to IPS manager 7.1.1 (new install on 2003 32 bit). Java up to date, direct connection. I can ping the sensors. Error is:Could not verify config username/password [null]I can logon to my sensors using IDM 7.0 no p...
In a ASA Active/Standby setup, could I use differnet IP Scopes for the Management Interface or do the Management IP's have to be in same IP range?
Dears, I am new to security. need your help in designing my network with security (ASA5506x) my current network has no security. ISP modem connected to Router, and I have multiple subnet for data, voice and CCTV.
Dears, I have some question below please answer, firepower does antivirus blocking ??do https/ssl packets are inspected by firepower IPS without ssl policy enabled, if anybody is sending a encrypted packets with virus or spyware are they will blocked...
Hi, I have an ASA on the edge of my network. When I traceroute from an outside host to an inside host, the last few hops all appear as the NAT IP for the inside host. I have turned on ICMP inspection and ICMP error inspection. I was able to replicate...
New to configuring Cisco routers. Client bought one, a refurbed ASA 5505 so I need to configure it. Well it was running ASA software version 8.4(7), the Configuration register was 0x41 So after configuring, not knowing any better I unplugged took ...
Hello Team, We have a problem regarding in sourcefire. We are unable to ssh and gui the management. Our resolution is we need to restart 4 times the appliance before it's work. What would be need to prevent this behavior?
I am having issues with a site to site tunnel between an ASA and a CheckPoint firewall. All of the devices on 8.2 work fine but the new ones are not working. Part of the config is not being copied over so I was hoping to get some help in the conver...
Hello friends,this time I have a problem with my ASA 5540. It has configured an outside interface and 3 inside interfaces. The outside interface has a public IP address and is Nating everything from inside interfaces. So far so good. My problem is th...
Is it possible to nat as required by the below parameter's? We wish to nat 192.168.200.0/24 (our private MPLS will not route any 192.168.x.x subnets by design) to another private range that our MPLS will route; 10.52.1.0/24. We also wish to do the ab...
Hello Gents, we have on our ASA huge number of connections which seems to be idle. Similar to below:TCP INET_FW: XX.XXX.XXX.XXX/56535 INET_CORE: YY.YY.YY.YY/20406, flags UfIB , idle 1h3m, uptime 1h9m, timeout 15m0s, bytes 444 For this specific con...
i want to let users from interface 1/3 , 1/4 , 1/5 to access servers in interface inside , how can i do that ? interface GigabitEthernet1/2 nameif inside security-level 100 ip address 192.168.1.2 255.255.255.0!interface GigabitEthernet1/3 nameif So...
Hello! We have encountered a problem with our Identity Firewall scheme recently (it works on CDA, 4 Microsoft 2012R2 DCs and Cisco ASA as a consumer device). We've noticed that some ip-to-user mappings are missing on CDA although users are in domain ...
Hi, I have to configure static nats with diferrent range of ISP2, they forward another range over this link. For example, they foward range 5.5.5.0/32 to we use from their address : 4.4.4.0/24. I configured the follow configs but donw works: inter...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 3 | |
| 1 |
