Hi,
Can someone tell me maxumum throughput on ASA 5516x if AMP and IPS are on.
We can't get more than 50 Mbit/s on download and 35 Mbit/s on upload.
If i remove AMP and IPS from rule d/u is normal.
I have deployed a 5506x with FirePOWER at the edge of one my networks for the first time thinking it would be a relaitlvey cheap way to add some IPS functionality to small client networks. I've been trying to get the thing to behave correctly with mo...
Hi, hope someone can help as i have an ASA 5505 series firewall and have it configured as below but i get'unable to open webpage' when trying to access ASDM via https://192.168.10.1--------------------------------------------------------------ciscoas...
Hello, I'm trying to find some information about simultaneous use of addrgroup (or portgroup) and reflexive statements in the same ACL entry. ACL parser on my 6506E with Sup2T doesn't allow me to do this, so I wonder if there is a way to do this or n...
Hi,
we have 2x 5510 in standby/failover mode going to 2x 2960s switches
The following are the interfaces:
E0 = OUTSIDE (block of 8 public ip's)E1 = INSIDE E2 = Standby (state failover)E3 = vlan 299 going to another ASAM0 = Standby (Lan failover)
We ...
1. do "hw-module 1 reload" to reload IPS cause failover that make ASA02 become active if ASA01 originally is active?
2. is this command "hw-module 1 reload" only can apply to active unit ? in another words, if i type this command in secondary unit ...
Hello everyone, and thank you in advance for your help. I am having an issue where we are migrating from an ASA 5505 to an ASA 5510 and the software versions are quite different as well so they handle VLANs differently.
The 5505 (SW Version 8.0(3)...
Hi AllWhile troubleshooting another issue I saw that the MSS of the webservers that I host behind my ASA is 1380. LAB-ASA# sh run all | inc 1380sysopt connection tcpmss 1380LAB-ASA#Then I noticed that the MSS of webservers like amazon.com and cnn and...
Hi All,
I have a branch ASA 5505 with a VPN tunnel over a T-1 WAN to the data center, which has a centralized internet pipe.
Branch ASA 5505=========VPN TUNNEL===========Data Center ASA 5520=====Internet Pipe
I am trying to roll out hierarchical prio...
Hi guys
I have a situation when used ASDM to configure the firepower module on the ASA 5506-X.I create a object to filter a URL for example, cisco.com, but when I put that on my policy, the firepower doesn't do anything and the traffic flow is normal...
I am currently using interface based ACL's and during my configuration of HSRP I had to allow my secondary routers IP to multicast to the address of 224.0.0.2 and just the same on the secondary one for the IP on the primary router. If I convert to a ...
I need to know why traceroute command through Cisco FWSM with dynamic PAT does not work.I can only make it work with a non-translated IP or with static NAT.Is this a bug or it just does not work? Cisco FWSM Firewall Version 4.1(15). Thanks a lot,Jos...
I'm trying to figure out if it is possible to configure an ASA cluster (with spanned etherchannel) when the firewalls connect to third party switches configured as a single virtual switch (similar to VSS but not VSS). Since the spanned portchannel "s...
