Network Security

ASA 5512 Upgrade ( From 9.0.3 to 9.1.6)

Hello We have 2 ASAs( 5512) configured in active standby mode. Ios version is 9.0.3 for bothe the ASAs. We are trying to upgrade the IOS to 9.1.6 . First we upgraded the IOS to the version 9.1.3 at this point failover works properly. When we try to u...

ASA Firepower SFR Settings

Since SFR is managed thru Firesight, is there any need for SFR to connect to any other systems other than Firesight? Is it required for it to communicate to DNS, NTP (mandatory)?

Firesight 750 Setup

I have just received the new firesight appliance running on version 5.3.1-152 and need to upgrade it to 5.4.0-763. I have downloaded the iso file Sourcefire_Defense_Center_S3-5.4.0-763-Restore.ISO from Cisco site Is it going to wipe out all the confi...

Cisco ASA - Idenitiy certificate

I am doing a hardware upgrade of a ASA. I want to export the existing device identity certificate to the new device. After I have completed the export. Does the old device retain the certificate in case I need to regress the upgrade for whatever reas...

ASA 5585 IPS SSP - Default Deny?

Can the IPS SSP default deny all outbound traffic? I have a client that would like to deny all outbound traffic and create a whitelist of allowed destinations. I realize this could be accomplished in the firewall policy, just curious of the IPS modul...

Resolved! proxyarp

Hi, As in the picture attached ASA dmz also replying the ARP request. And the host 1 update arp cache with the ASA interface mac address . This stops the communication between HOST 1 and HOST 2 . How can i solve this issue ? other related c...

Resolved! ping does not work with no nat config

Hi Everyone, Here is setup Sw1---192.168.50.226-----------Firewall---------------192.168.50.230--Sw2 From Switch 1 i am trying to ping the interface IP of switch 2 which is directly connected to firewall but itdoes not work. Firewall has no NAT co...

Resolved! timeout ICMP issue - connection table exaust

Hi, I'm trying to figure out why does my ASA have a ICMP timeout of 1 hour instead of default 2 seconds as stated in the documentation and cli. fw-asa(config)# timeout icmp ? configure mode commands/options:<0:0:2> - <1193:0:0> Idle timeout for icm...

No access internet from Cisco 800 series

Hi I have mail server his ip is 192.168.1.4 internally my network and public ip is 78.93.244.61 when i test internet access to mail server it give test internet connection failed i call my isp i told them test internet connection failed please open ...

IPSec Tunnel between ASA 5510 and ASA 5505

Hello and hopefully someone here can help as I am not an expert in Cisco. I am having an issue with traffic thru a site to site tunnel. It appears that not all traffic is being allowed into the ASA 5505 from the ASA 5510. Configuration: HQ = ASA ...

Resolved! DMZ Question, though I believe the answer lies in NAT...Please see attached diagram

I have an ISP that has given us a 32 IP Block (30 IPs addressable). I have a switch which the inside interface of the ISP router is connected to. From another port on this switch I have connected to the Outside interface of the ASA. All this works as...

Resolved! ASA Firewall MGMT interface Management Advice Needed

I have SETUP ASA 5525-X firewalls in a HA pair. It's inside interface (Gi0/0) is terminated on L3 switch (vlan30), firewall will use L3 switch to reach all the inside segments. On the inside network we have vlan's for DATA (vlan10), MGMT(vlan20) and ...

Working with ISE 1.4 virtual machine

I just loaded an ISE 1.4 ISO into Parrallels to use as a lab server. Parrallels seemed to install the image properly, but I end up at a admin@ISE prompt that doesn't allow me to do much of anything. If I type ifconfig -a I can see the IP of the mac...

ASA 5520 - CUBE NAT & SIP Inspect

Hi Everyone, I'm having issues with my CUBE router and inbound calls. Outbound is working fine, but inbound is is getting a Malformed/Missing URL This is the invite comming into the CUBE. As you can see, it's missing the called number. SIP/2.0 400...