Has anyone seen this message after deploying a new NAT on an ASA.
PAT pool exhausted. Unable to create TCP connection from outside.
portmap translation creation failed for tcp src outside
Hi,
I am setting up a NAT firewall.
Could you help me understand why the below:
Asymmetric NAT rules matched for forward and reverse flows; Connection for udp src outside-AeC-EBT:10.230.127.35/55812 dst inside-AeC-EST:192.168.224.15/162 denied due ...
hello,
I want to activate/install IPS on ASA 5515-x and ASA-5512-x
I'm not able to find what type license must order to activate IPS module
This platform has an ASA 5515 Security Plus license.
Failover cluster licensed features for this platform...
Software Version 9.1(7)4 <context>
ASA5585-SSP-10
We have an ASA in context mode and I have not worked with this setup before. I am just wondering what changes are made in system context and what changes are made in each individual context.
For exam...
Hi, i've a new ASA 5506 9.5.2. On this asa i've configure one interface (phisical) as called LAN1. 192.168.40.1/24. Behind this interface there's a web server called POOL with 192.168.40.2 DFT GTW 192.168.40.1. There's another host in this network c...
Hello,
i am new to SFR. I need to change the config on the module after i configured it initialy. How do you Redo the sfr setup. it is a 5585x module.
Thank you
Hi,
I have a short question. I am using two cisco ASA in A/S failover. I am planning to move them to A/A configuration. The problem is I am very far from this devices and I have no console connection to them (only SSH). Will i lose connectivity duri...
Hi!Could someone please help me identify part number for ASA5585-X cluster license? It's mentioned here: http://www.cisco.com/en/US/docs/security/asa/asa91/license/license_management/license.html#wp1951657 ("Clustering Disabled, Optional license: Ava...
Hello!
We have, to me at least, a strange problem. We have two ASA5525-X in active/standby. Only a few of the interfaces (7 out of 30) are picked up by the SFR module (the same on both units). My experience is that only traffic entering and leaving ...
Hi I got got two new ASA 5508-X. The software version is 9.5.1 and ASDM is 7.5.1. Previously on my ASA 5505's I was allowed to add addresses like 10.100.0.0 /16 in any of my configurations, now the new ASA's are telling me I cant use that, but I want...
After successfully adding LDAP on my ASA Firepower, i have tried blocking/allowing a web site to a particular user. Unfortunately the condition is not working. If i use an IP address instead then the site is successfully allowed/blocked. I am using...
I have lost Firepower under Configuration . I can see it there. I need to upgrade Firepower version.
Under - ASA Firepower Status -Connect to ASA Firepower application I only see https://No DC Configured
Do I need to configure IP in here to be able t...
Hi halijenn/ expertsi have a query related to ASA timeouts specifically the comparison of the "timeout conn" and the MPF config which is specifically related to modifying the idle timeout value for certain set of traffic (class-maps).I have already g...
Hi All,
I have this configuration in 2 ASA firewalls to enable failover, but for some reason its not working.
Primary-ASA# sh run failoverfailoverfailover lan unit primaryfailover lan interface FOLINK GigabitEthernet2failover interface ip FOLINK 112...
I recently purchase an ASA 5508-X firewall. It currently has ASA version 9.5(2) on it, but it need to 9.5(2.2). I've gone out to the Cisco website and used the following path:
Downloads Home > Products > Security > Firewalls > Next-Generation Fire...
