I need to be able to ping a DMZ host from an INSIDE host and visa versa. I have tried configuring a static nat as follows static (INSIDE,DMZ) 192.168.10.0 192.168.10.0 netmask 255.255.255.0 I created an access-list called EXEMPT which permits any...
Hi , I am fairly new to the Firepower services, I am currently ordering equipment for a client, namely 2x 5516-FPWR-Bun Firewalls, I just want to confirm 2 things, Do I need a FirePower IPS Licence (L-ASA5515-TA) per device? and secondly do I only n...
Hi, I have a really long access list that has the following 2 entries, in this order, contained in it:show ip access-list blah<output omitted> 1010 deny ip any 192.168.1.128 0.0.0.63 log (no matches)1200 permit tcp host 192.168.1.130 gt 1023 any e...
Hi,I am unable to get a ping response from a host whose gateway address is the ASA and it’s configured on an another VLAN. Note that connect to the host on other protocols i.e. RDP, HTTP, 23 etc. Topology is something like this.My desktop is connect...
Hi,I have a ASA 5525 that connects to two networks - eg 10.10.10.0/24 and 11.11.11.0/24. Due to a requirement I need to configure port 0/0 for one-way out going traffic and 0/1 for one-way incoming traffic.My ASA ports will interface a BAE's data-dio...
Hi - I just can not find the following SKUs in CCW . Anyone can help with correct SKU and its replacement part numberDS-FIPS-KIT = REV-BOCisco4 labels and 0 shield per kit for ASA 5520ASA5585-X-FIPS-KITCisco8 labels and 1 shield per kit for ASA 5585
Hi,Is it possible to make a failover pair between the ASAv and the physical models? ThanksSteve
what is the difference in configuration in 5506X and 5505 ?default we use routed mode,why this link https://supportforums.cisco.com/discussion/12456891/asa-5506-x-switchportsneed switchport ?which kind of real practice need switchport in ASA?
I am currently planning on upgrading the current ASA IPS-SSM to firepower. Can someone confirm if the following licenses and product are all i needed? 1. Model: Cisco - solid state drive - 120 GB (Part number: ASA5500X-SSD120=)2. Model: CISCO FIREPO...
Hi all,First a little background on what I'm trying to do. I have a webserver in my DMZ running two FTP sites, one on port 21 and one on port 24. The ftp server running on port 21 is working fine, however I am having issues configuring my ASA5505 for...
Hi Team, I am planing to upgrade my ASA 5010 with ios version 8.2(5) to 8.4(5). I am running an high available Active/Standby Scenario in my Network.i am using the following features1. ipsec VPN2 Static NAT Identity NAT and Dynamic NAT3 I have not e...
I have configured Anyconnect VPN. I can connect to VPN from outside successfully but can not ping my server or map shared folder.can anybody have alook on firewall config and help me out. ASA Version 9.1(2) !hostname DASA2domain-name JDSYINGAA.comena...