Network Security

Wouldnt this ACL bring down the network? Since internal-out ACL has deny any any at the end implicitly, this will allow only icmp going out? ciscoasa#config t ciscoasa(config)#access-list internal-out permit icmp any any echo-reply ciscoasa(config)#a...

Is there any design guidance for building an Active/Active firewall layer for a WAN edge that spans two sites? As I see it I can have a single ASA per site in A/A access the two sites, or a cluster. What are the pros/cons and dependencies for these?

I am getting the error: System processes are starting, please wait when I log into the management IP address. I cannot log in to the gui.

Hi guys - we have a client that purchased a 5512-x years ago.  They have let smartnet expire and now their device will not boot.  I'm not sure if it's hardware related or not but it will not load the image.  I'm trying to reload a new default image o...

Hello, I have an issue with a Connection am trying to set up i have an application that is connecting to a remote server via Telnet but (UNIX server) but every time a Syn /Ack is established it cuts the connection and resets the TCP connection. On th...

Demo discussion

Hello, I want to enable syslog logging on my ASA,  the syslog server is connected into my ASA mgmt-int.   I tried a lot, the asa is not sending any logs into the syslog-server.        Can you see my config and comment, where the issue could be ? is t...

Hello,I got some questions from customer about FMC signature update(local malware analysis and file preclassification signature updates) . What I could find in document about this signature update is that, by default, automatic update is enable and F...

Hi, If we upgrade the ASA 8.2(5) to ASA 8.4(5), will the policy PAT gets auto converted or do we need to do manually after upgradition. Also what is the config that will not be auto converted after upgraded to ASA8.4(5) from ASA 8.2(5) Config: ===== ...

we need to be able to traceroute to the internet through the asa, but when the traffic hits the asa i then get requst time out.i can ping but not traceroute, is there an easy fix?

I have a customer with several ASA-IC-6GE-SFP-B= expansion cards. We need to retrieve the serial numbers to add them onto Smartnet support. Unfortunately it appears that the normal "show inventory" does not report serial number of the cards. The outp...

When I traceroute from internal network, after ASA...I only see * which is annoying. I found this article. https://supportforums.cisco.com/discussion/11219676/cannot-traceroute-through-asa Wouldn't this bring down my network? ciscoasa#config t ciscoa...

Hi all, I´m getting more and more familiar with Firepower... Now I have a running setup with 2x ASA 5525x. A main point, that I actually don´t understand is about the network discovery. My firewall is setup in routed mode. It is the gateway for hosts...