I have a DMZ that has a Cisco Nexus switch with VRFs as well as a physical firewall. Is it common in a DMZ environment to put the gateways for the DMZ systems on a Nexus VRF? Or should they be on the physical firewall? If they are on the VRF, then ...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(2) -
APIs
(1) -
Appliances
(17) -
ASA
(1) -
Branch Router
(1) -
Buying Recommendation
(81) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,335) -
Cisco Bugs
(60) -
Cisco Cafe
(15) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(138) -
Cisco Firepower Device Manager (FDM)
(768) -
Cisco Firepower Management Center (FMC)
(2,700) -
Cisco Firepower Threat Defense (FTD)
(2,986) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(54) -
Cisco Secure Firewall Management Center (FMC)
(273) -
Cisco Secure Firewall Threat Defense (FTD)
(325) -
Cisco Security Cloud Control
(17) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(20) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(45) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(2) -
Community Bug or Issue
(1) -
Community Feedback Forum
(26) -
Community Ideas
(12) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(237) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(14) -
Firepower Management Center (FMC)
(383) -
Firepower Threat Defense (FTD)
(206) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,051) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(8) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,519) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(6) -
License
(307) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(87) -
Network Security
(2) -
NFVIS
(1) -
NGFW Firewalls
(37,234) -
NGIPS
(1,794) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(3) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,660) -
Other Networking
(9) -
Other Routers
(8) -
Other Routing
(22) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Physical Security
(19) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(1) -
Room Endpoints
(1) -
Routing Protocols
(8) -
SD-WAN Security
(1) -
Security
(4) -
Security Management
(565) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(27) -
VPN and AnyConnect
(1) -
Vulnerability Management
(43) -
WAN
(7) -
Web Security
(4) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hello Forum Folks! I'm working on a problem I feel should be easy, but I'm just not able to get my head wrapped around it. Our network is configured something like this: Outside 1.1.1.1 (Security lvl 0) Inside 192.168.1.0/24 (Security lvl 100) OtherI...
Hi, I tried to configured two object nat as below: Source Y (Internet) to destination Z (DMZ) translate port 443 into 9443 - I need this for a specific solution that only answers requests from Internet on this port Source Y (Internet) destination Z ...
Resolved! Firepower not blocking URLs
Searching around I see a number of posts on the same subject, but these relate to v5.X software. Relevant bits of config: class sfr sfr fail-openuser-statistics accounting! class-map sfr match access-list SFR-REDIRECT ! access-list SFR-RED...
Dear All, i don't have any knowledge about SSL and TLS kindly describe. what is the purpose of having ssl and tls in our network how can i change config from SSL to TLS with 128 bit length
Resolved! High Availability - Sensors
Hi to everybody, I have a question about the High Availability for the managed devices. Our customer has bought two sensors and two FMC. So, I'd like to put in HA the two sensors... Them are in passive mode. How can I do it? Thanks in advance Rega...
Dear experts, What are Cisco's plans with customers who have 5585x's with firepower SSPs, will or is the unified image (be) supported? How would we go about managing the devices? Will it be through a management console like managing FP but for ASAs a...
Resolved! PBR 9.4.1 ASA 5515-X
FYI,Hope this helps someone else. I was struggling trying to get PBR working on my ASA 5515-X 9.4.1. At first I tried adding it using ASDM, but that doesn't work at all. You can create the route-map, but it doesn't apply the policy-map to the inte...
In our office, we have a two-VLAN setup with Data running on VLAN 1 and VoIP running on VLAN 2. We also have separated modems and gateways for each of them, and would like them to have segregated internet access. Below is a list of all the VLAN IP in...
I have a NAT problem which has been really bugging me. The issue itself relates to Skype for Business. There is client wireless traffic (mobile client software) coming to the inside interface of the ASA that is destined for the public IP address of a...
Simple complex question. Reading best practices, it is best to place the inline IPS behind the firewall. We will be using 7125 Firepower appliances, not the built in Firepower on the ASA. However, how do we protect a DMZ without Inline? I haven't re...
Hi Team, What errors or misconfigurations would make asa with active/stanby setup result to active/active? Thank you for your inputs. Regards, Mady
Hi All,What does the 100% below means. Does it indicate that the system is currently under huge cpu intensive load ?Current control point elapsed versus the maximum control point elapsed for: 5 seconds = 100.0%; 1 minute: 100.0%; 5 minutes: 100....
I have port forwarded for my MIS server to be accessed from outside. From inside interface, i use 10.10.2.2:8000 to get access of the MIS. But, what i want right now is to be able to access the MIS via the public ip itself from the inside interface....
Hi All, Im getting the below logs, could someone assist..!! Software Version 8.4(7) / ASA5580-20 %ASA-5-720012: (VPN-Secondary) Failed to update IPSec failover runtime data on the standby unit
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM | ||
| 08-10-2026 08:58 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
