Network Security

Resolved! 5510 DMZ ?

Hi, we have 2x 5510 in standby/failover mode going to 2x 2960s switches The following are the interfaces: E0 = OUTSIDE (block of 8 public ip's)E1 = INSIDE E2 = Standby (state failover)E3 = vlan 299 going to another ASAM0 = Standby (Lan failover) We ...

Resolved! do hw-module 1 reload cause failover?

1. do "hw-module 1 reload" to reload IPS cause failover that make ASA02 become active if ASA01 originally is active? 2. is this command "hw-module 1 reload" only can apply to active unit ? in another words, if i type this command in secondary unit ...

Inter VLAN routing on an ASA5510

Hello everyone, and thank you in advance for your help. I am having an issue where we are migrating from an ASA 5505 to an ASA 5510 and the software versions are quite different as well so they handle VLANs differently. The 5505 (SW Version 8.0(3)...

increasing MSS

Hi AllWhile troubleshooting another issue I saw that the MSS of the webservers that I host behind my ASA is 1380. LAB-ASA# sh run all | inc 1380sysopt connection tcpmss 1380LAB-ASA#Then I noticed that the MSS of webservers like amazon.com and cnn and...

Resolved! Shape average command crashing my 5505 daily

Hi All, I have a branch ASA 5505 with a VPN tunnel over a T-1 WAN to the data center, which has a centralized internet pipe. Branch ASA 5505=========VPN TUNNEL===========Data Center ASA 5520=====Internet Pipe I am trying to roll out hierarchical prio...

Resolved! URL Filter on SFR Module ASA 5506-X with ASDM

Hi guys I have a situation when used ASDM to configure the firepower module on the ASA 5506-X.I create a object to filter a URL for example, cisco.com, but when I put that on my policy, the firepower doesn't do anything and the traffic flow is normal...

HSRP Multicast with ZBFW

I am currently using interface based ACL's and during my configuration of HSRP I had to allow my secondary routers IP to multicast to the address of 224.0.0.2 and just the same on the secondary one for the IP on the primary router. If I convert to a ...

Traceroute through FWSM

I need to know why traceroute command through Cisco FWSM with dynamic PAT does not work.I can only make it work with a non-translated IP or with static NAT.Is this a bug or it just does not work? Cisco FWSM Firewall Version 4.1(15). Thanks a lot,Jos...

ASA cluster with non Cisco switches

I'm trying to figure out if it is possible to configure an ASA cluster (with spanned etherchannel) when the firewalls connect to third party switches configured as a single virtual switch (similar to VSS but not VSS). Since the spanned portchannel "s...

Resolved! NAT rules and "proxy arp" - Cisco ASA5555X

Hey Im migrating a large 8.2 configuration and there is a lot of cleanup and manual labor since the converted configuration is a mess. I somewhat think I understand "proxy arp", but when testing for example a web server nat'ed from a dmz or somewhere...

Connectivity between firewall and Cisco 3750

hi, We are using Cisco 3750 switch in our environment. our requirement to connect firewall(PAN) to one of the port in the switch. THe cable is connected however the interface shows not connected..But it is not in the case when we connect LAPTOP with...

Resolved! SSL HTTPS connection from "outside" interface

Hi, i'm trying to establish a HTTPS connection to my ASA from another "site" in packet tracer. I can ping across the sites and into the "inside" network of the other site but cannot HTTPS into the ASA or the web server itself also. Here is the config...

Lost management access (SSH & HTTPS)

I have lost management access to about 10 ASA5505s all within past few days. Of about 20 or so, half of them are unreachable via SSH or HTTPS. The firewalls are up and operational, including the VPNs to the central data center. I can ping them just f...

Resolved! Cannot select URL-filtering on FireSight with Activated License

Hi community I've got a FireSight 6.0 VM with 4 FirePower modules enabled from four ASA 5506-X devices. They are all updated to FirePower 6.0 and in FireSight I have an activated license: Under device management for a FirePower I still cannot sel...

Cisco CSM casuser alternative

Hello all, I have installed Cisco CSM Server 4.9 as a software on my customer's Windows Server 2012 (henceforth called as the "host"). I can login on the host using RDP and that too using my AD account as given by the customer. I do not have any acce...

Network Security

Forum Posts

Resolved! 5510 DMZ ?

Resolved! do hw-module 1 reload cause failover?

Inter VLAN routing on an ASA5510

increasing MSS

Resolved! Shape average command crashing my 5505 daily

Resolved! URL Filter on SFR Module ASA 5506-X with ASDM

HSRP Multicast with ZBFW

Traceroute through FWSM

ASA cluster with non Cisco switches

Resolved! NAT rules and "proxy arp" - Cisco ASA5555X

Connectivity between firewall and Cisco 3750

Resolved! SSL HTTPS connection from "outside" interface

Lost management access (SSH & HTTPS)

Resolved! Cannot select URL-filtering on FireSight with Activated License

Cisco CSM casuser alternative

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Setting out TCP MSS on FTD only for non-ipsec endpoints

Cisco Stealthwatch ipfix exporter

FTD Configuration Resource Utilization

FMC - Error mesasge: Unable to reach Cisco Cloud from the device

CISCO FXOS Upgrade - API

ASA upgrade asks for cisco.com credentials

Cisco ASA 9.13(1)on Firepower 1140 VPN connections starts failing

Configuring Cisco Firewalls in Azure - HA

FTD 2130 DEPLOYMENT FAILURE FORCE REFRERSH DOES NOT WORK

FPR 3105- Migrating 2 Subnets in same zone