Network Security

Resolved! Slowness in RDP with NAT - ASA 5525X 9.3

Hello All, I did a swap of ASA 5520 to 5525-X. Nats are working fine but users cannot display the interface when using RDP. The sessions are very slow compared to the old ASA. When I did a rollback to ASA 5520, the RDP sessions are working correcty. ...

Resolved! HTTP inspection problem

Hi, I have configured IOS Zone Based Firewall on my office 871 router. I've made an inspection rules for http, https, icmp and dns for in-out zone. Often I can see in router log the message: %APPFW-3-HTTP_MAX_REQ_EXCEEDED : Number of unanswered HTTP ...

Resolved! Install identity cert on asa

Hello, I would to install a certificate on an ASA so that when I log into it via ASDM, it does not give me the security warning that the site is untrusted. I created an identity CSR on the ASA and received the cert back from my internal CA server and...

ASA TCP connection timeout for database

Hi I have a new database which is access via the firewall. After 5 minutes of inactivity it times outs. I am wondering whether this is due to the TCP connection timing out although I have not configured anything on the firewall to timeout the connec...

Defence Center Configuration backup/export via CLI

Hello, I have a situation, where I have a defense center version 5.2 (currently end of support), and the GUI is not opening due to some issue/database corruption. I opened a case with cisco and since 5.2 is EoS, they cannot do anything. I tried to re...

How to tell if sourcefire is blocking without the use of the Defense Cetner

Is there a way to tell if a source fire device is blocking without the use of defense center? We have run into a few issues where the device will stop passing traffic or is blocking traffic, but there are no logs (eventhough they are set to log). Is ...

Resolved! CSM - Verifiying the Application Version

Hello. I have inherited a CSM Application installed on a VM device. I know that it is version 4.8 but I am trying to verify if it is the standard 4.8 release or if it is the 4.8 with SP1 release. The original installation file has been deleted a...

Resolved! Firesight Management Center Virtual in ESXi version 6

Hello All, Is it possible to install any version of Firesight management center virtual appliance in vmware ESXi 6?. Thanks and Regards

Resolved! ASA 5520 - Move failover interface from current to management interface

Hi, We have two ASA 5520 working as a failover pair. It is using the GigabitEthernet0/0 interface as a failover interface but now we need that interface for traffic and would like to use the management interface as a faillover interface because we do...

Not able to ping a sepcific network from inside interface

Hi I am not able to ping a specific subnet via the inside interface. GigabitEthernet0/0 62.211.xxx.xxx/27 ----> WAN1GigabitEthernet0/1 62.211.xxx.xxx/27 -----> DMZ1GigabitEthernet0/2 10.250.250.254/24 -----> InsideGigabit...

FireSight HTTP Response not always working

I have the Firesight Virtual Management Center and the matching ASA-5525-X FirePower module installed.Everything is working except the http response page.It is crazy on some computers on the same subnet the HTTP Response page displays every time, on ...

CSM 4.2 : Service temporarily unavailable

Hi All, PLZ I need Your help to solve CSM 4.2 issue : in the Web Browser i Have this message : Service Temporarily Unavailable The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try ag...

Panorama firewall

Hi Guys, Let me start by saying I appreciate this is a Cisco forum and I am a big fan of cisco. I am however working for a client whom has PA firewall and PA does not allow you to post on their forum unless you have a subscription. I am checking a...

Advise for scripting for Cisco Devices

Hi Friends, I am working on Cisco Switches, Routers and ASA Firewall. I wanted to learn some scripting for cisco devices, Which will be help full in future like taking auto backup, trouble shooting... Please suggest me which one is the best for cis...

Resolved! Pinhole timeout

Hi,What does a pinhole timeout indicate?Aug 19 2011 07:44:22: %ASA-6-302014: Teardown TCP connection 54522 for outside:192.168.25.22/0 to inside:192.168.125.12/49158 duration 0:02:01 bytes 0 Pinhole timeoutAug 19 2011 07:44:22: %ASA-6-302014: Teardow...

Network Security

Forum Posts

Resolved! Slowness in RDP with NAT - ASA 5525X 9.3

Resolved! HTTP inspection problem

Resolved! Install identity cert on asa

ASA TCP connection timeout for database

Defence Center Configuration backup/export via CLI

How to tell if sourcefire is blocking without the use of the Defense Cetner

Resolved! CSM - Verifiying the Application Version

Resolved! Firesight Management Center Virtual in ESXi version 6

Resolved! ASA 5520 - Move failover interface from current to management interface

Not able to ping a sepcific network from inside interface

FireSight HTTP Response not always working

CSM 4.2 : Service temporarily unavailable

Panorama firewall

Advise for scripting for Cisco Devices

Resolved! Pinhole timeout

A new chapter of the Spotlight Award begins!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

FMC correctly seeing some ISE PassiveID users, other show Not Found

Adding an FTD to cdFMC (CDO) and prefilter policy questions

FTD Troubleshooting issue _ system support firewall-engine-debug

Cannot Onboard FTD Device in CDO

ise记录网络设备输入的命令

Cisco ASA Static NAT Issue with Server not connected directly to ASA

FTD 2100 Upgrade from CLI

Check if ASAs have Firepower Service Modules?

FTDs 4115 in HA A/P need to be moved to new FMC

Upgrade FMC from 6.6.7 to 7.0.X