Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Resolved! Question about netmask in 8.2 CLI ASA config

Hello, I am having trouble understanding what the netmask in this particular global statement does. Is it dynamic NAT or just PAT? In other words, will the ASA translate the real ip addresses ( which is a network object group in this ACE, by the way)...

Resolved! how to access internal mail when on guest network

so we recently installed a ASA in place of a router. however now our smart phone users cant get there email on there phone when they are on the guest network.(phone are only allowed on the guest network) I expect this is because the guest network use...

Firepower Active Authentication unable to make it work

I am trying to setup the Active and Passive Authentication with Firepower version 6 ( ASA 5585-SSP-60 ) I installed the fire power user agent and setup realm in integration. Passive Authentication works. I am seeing two problems, 1) if user is not...

Resolved! Problem with cisco 5510 port mapping

Hello, My device Cisco ASA 5510, ASA 8.4(2), ASDM 6.4(5)206 What I try to achieve. 1) Host 10.10.11.108 listening port 8080 2) Trying to access it from WAN e.g port 8090 I tried following commands: object network 10.10.11.108_8080 host 10.10.11.10...

IronPort - Blocked Out of Office Replies

All, I'm seeing an issue where our domain is not receiving the Out of Office (OOF) Replies, sent from another domain, with whom we have an affiliation. Within our c680's, I've added the domain (and later I added the FQDN of each sending server) to ou...

Routing between 2 interfaces - Same security level ASA 5506

Hello, I am trying to have 2 interfaces on ASA 5506 to talk to each other and not able to succeed. They have same security level, so they should not need any access list right? Here is the config hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 e...

2nd ISP NAT not working in ASA 8.3

Hi, i have two ISP connected to Cisco ASA. When one ISP go down we manually shift default route to 2nd carrier. in pre 8.3 our PAT worked fine, but in 8.3 ASA our PAT doesnt work. and even if we change default route to 2nd Carrier, NAT/PAT of first c...

Resolved! Allow a single computer access to www.noaa.gov

We have a group of computers denied access outside our network with an access rule setup on our ASA5515. This rule keeps all computer within a certain subnet from having internet access outside the firewall. We want to setup 1 computer to have acce...

Resolved! Zone Base firewall on ISR

Hi I have ISR which is configured with Zone base FW. outbound interface to WAN is a member of ZBFW. I want to limit incoming traffic. I want to use ACL for this purpose rather than ZBFW. Can i apply access lists on that interface in the inbound dir...

Cisco Anyconnect

Hi, I am using Cisco ASA 5508-x 9.4 I have some users who connect via any-connect receive: VPN establishment capability from a remote desktop is disabled. A VPN connection will not be established. Any ideas?

ASA Client VPN -> Internal DHCP

Hi, I am new to the world of networking and firewalling (I am the SAN/VMware who was given the "you are the network guy tshirt) I have a ASA 5508-X running 9.4. My remote VPN users are currently connecting and are getting IP's from the local IP po...

ASA 5515 ICMP Drop-reason: (nat-xlate-failed) NAT failed

Hi All, We have configured a firewall, PAT is in place for the traffic from INSIDE to OUTSIDE and all the traffic from IN-OUT is allowed. When we do packet tracker from IN-OUT on any port, packet tracer result is allowed, but at the same time when ...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Resolved! Question about netmask in 8.2 CLI ASA config

Resolved! how to access internal mail when on guest network

Firepower Active Authentication unable to make it work

Resolved! Problem with cisco 5510 port mapping

IronPort - Blocked Out of Office Replies

Routing between 2 interfaces - Same security level ASA 5506

2nd ISP NAT not working in ASA 8.3

Resolved! Allow a single computer access to www.noaa.gov

Resolved! Zone Base firewall on ISR

Cisco Anyconnect

ASA Client VPN -> Internal DHCP

ASA 5515 ICMP Drop-reason: (nat-xlate-failed) NAT failed

Resolved! ASA 5505 Possibly Interfering/Blocking UC560 Incound Calls

Access time control rule on firepower

ASA block OUTBOUND port 80, 443 for a single host

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Issues selecting connection profile (connection attempt has failed)

Cisco router IPSEC tunnel to AWS with Star Link help

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Using FlexConfig to change default command (no sysopt noproxyarp) rule

Trying to enable AnyConnect Alias

EU compliance certificate Firepower 1010 NGFW

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC