Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Not able to ping a sepcific network from inside interface

Hi I am not able to ping a specific subnet via the inside interface. GigabitEthernet0/0 62.211.xxx.xxx/27 ----> WAN1GigabitEthernet0/1 62.211.xxx.xxx/27 -----> DMZ1GigabitEthernet0/2 10.250.250.254/24 -----> InsideGigabit...

FireSight HTTP Response not always working

I have the Firesight Virtual Management Center and the matching ASA-5525-X FirePower module installed.Everything is working except the http response page.It is crazy on some computers on the same subnet the HTTP Response page displays every time, on ...

CSM 4.2 : Service temporarily unavailable

Hi All, PLZ I need Your help to solve CSM 4.2 issue : in the Web Browser i Have this message : Service Temporarily Unavailable The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try ag...

Panorama firewall

Hi Guys, Let me start by saying I appreciate this is a Cisco forum and I am a big fan of cisco. I am however working for a client whom has PA firewall and PA does not allow you to post on their forum unless you have a subscription. I am checking a...

Advise for scripting for Cisco Devices

Hi Friends, I am working on Cisco Switches, Routers and ASA Firewall. I wanted to learn some scripting for cisco devices, Which will be help full in future like taking auto backup, trouble shooting... Please suggest me which one is the best for cis...

Resolved! Pinhole timeout

Hi,What does a pinhole timeout indicate?Aug 19 2011 07:44:22: %ASA-6-302014: Teardown TCP connection 54522 for outside:192.168.25.22/0 to inside:192.168.125.12/49158 duration 0:02:01 bytes 0 Pinhole timeoutAug 19 2011 07:44:22: %ASA-6-302014: Teardow...

ASA MSSQL Inspection

Hello everybody, As far as I know there is no Deep Inspection engine for MSSQL in Cisco ASA, so here arise a question. How to inspect MSSQL traffic in Cisco ASA or better to say how to inspect a custom service or port , where there is no Deep Inspec...

ASA 5585X Firepower hardware module in passive mode

We would like to connect a ASA 5585X Firepower hardware module to a switch span port to discover current live traffic on the production network.However there is no traffic being captured using a service-policy.The documentation I can find is about co...

Resolved! ASA 5540 - config issue

Hi Experts, When I do a show run these are the only options shown..! The problem is that I am unable to configure the interface? Interface configuration commands: default Set a command to its defaults description Interface specific descripti...

ACLs - managing traffic between low and high security zones ?

Hi, I have two network with admin systems. The first one contains all the admin servers, DC, DNS, DHCP, WSUS,... for LAN servers. The second one contains an RODC, DNS, DHCP for DMZ servers. I then have 20 DMZ networks. From: http://www.cisco.com/web/...

Resolved! is ASASM support clustering ?

can i configure two ASA services module sitting in on chassis (6506-E with 720-10G) as clustering ? or has to use VSS mode ? any config example link? Tried search online but can not find any related to ASASM case Thanks

Resolved! Static NAT with one real IP and 2 public IPs on 2 ASAs

I have a server with 10.210.1.229 which is configured for static NAT on the old firewall. This firewall has several VPN connections that terminate on this firewall. As we are transitioning the VPNs to terminate on the new Firewall 5525x Can I create ...

Resolved! ASA 5506-x

Hi, I'm preparing a CCIE security lab and I'm thinking about buying the 5506-x to practice with it so I will need some insight from you guys about the product. I have some questions about it: 1-Is the CX context aware supported on this model. Do I...

Cisco PIX Upgrade from version 9.x

Hi Team, We are using a configuration manager software to automate the upgrade of Cisco PIX which involves copying the image from tftp server. We can see the file copied successfully, however in earlier versions of PIX we were getting a message of "I...

ASA 5545X upgrade

Hi everyone. I have a pair of 5545x in HA. I want to perform a software upgrade from version 9.1(2) to 9.5(2) with zero downtime. I was wondering if it is possible to perform this upgrade directly or if I have to go through all the minor releases fir...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Not able to ping a sepcific network from inside interface

FireSight HTTP Response not always working

CSM 4.2 : Service temporarily unavailable

Panorama firewall

Advise for scripting for Cisco Devices

Resolved! Pinhole timeout

ASA MSSQL Inspection

ASA 5585X Firepower hardware module in passive mode

Resolved! ASA 5540 - config issue

ACLs - managing traffic between low and high security zones ?

Resolved! is ASASM support clustering ?

Resolved! Static NAT with one real IP and 2 public IPs on 2 ASAs

Resolved! ASA 5506-x

Cisco PIX Upgrade from version 9.x

ASA 5545X upgrade

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Change IPS and AMP Policies to enforcement mode

FTD SSE Connector Service down

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Migrate cisco FTD from series 2000 to series 3000

ACL on VTY Line Blocks All Connections

ASA Help With NAT for Printer

Does the FMT overwrite all FTD configuration if only selecting NAT

Can't ping from FTD managemnt to FMC