Network Security

Hi Cisco Support, We have encountered a problem on our dhcp relay going to Site to Site VPN. ACL is permit any any for testing purpose. 10.124.0.x/23 Client <> ASA <> S2S <> ASA <> DHCP server 10.120.0.8 (10.120.0.x/23) We test to put a static ip on ...

Hello Experts, I have 5 branches connecting to HQ through CISCO ASA site-to-site IPsec vpn.     The tunnel works normal usually, but as soon as I start pinging any clients behind the branch ASA firewall over the IPsec-tunnel, so the Tunnel gets drop ...

Hello, I was asked by my office to look at the ISA config. When browsing to a specific web site, catholicsmobilizing.org, sometime we can connect to the site, and sometime it gets blocked. Unsafe Website Access Blocked The website catholicsmobilizing...

Hi Team, Hope you can help me on this issue. We have Cisco ASA 5505 and we are encountering problem on adding a SIP IP phone. At first, we have problem on registering the phone.Upon disabling the sip inspection on ASA, the IP phone is successfully re...

Hello, i'm currently trying to transform my home network into something better by adding a Cisco ASA 5510. I'm going to post my current running config. the idea is for everyone who gets in by VPN to transfer all traffic to my public IP address. All t...

Hi, We are using ASA 5520 and wanted to replace two ISA 2006 instances with ASA 5520 + some web filtering, content filtering software / module along with  What options can be explored for this purpose and any recommendations

When we look in the connection events and traffic statistic of Firesight 6.0 it seems we are missing SMB traffic info...(and maybe more info) Even with Legacy SMB Inspection Mode enabled it;s not showing up. Any idea?

Hi, Can someone tell me maxumum throughput on ASA 5516x  if AMP and IPS are on. We can't get more than 50 Mbit/s on download and 35 Mbit/s on upload. If i remove AMP and IPS from rule d/u is normal.  

Dear ALL. i have a case that i need to migrate from Fortigate to ASA or source fire , any ideas for this kind of migration   thanks in advance 

I have deployed a 5506x with FirePOWER at the edge of one my networks for the first time thinking it would be a relaitlvey cheap way to add some IPS functionality to small client networks. I've been trying to get the thing to behave correctly with mo...

Hello, I'm trying to find some information about simultaneous use of addrgroup (or portgroup) and reflexive statements in the same ACL entry. ACL parser on my 6506E with Sup2T doesn't allow me to do this, so I wonder if there is a way to do this or n...