Hello Experts,
I tried the command mentioned in step 2 on WVT at the mentioned link:
https://supportforums.cisco.com/blog/12049491/conversion-tool-checkpoint-fw-cisco-asa
However it generated only one output file for security policies.
How do I g...
i have an FTP server we are trying to establish. the configuration is like this
Front end server in the DMZ 172.18.0.2/24 with 172.18.0.1/24 as the gateway which is on the ASA
back end server 10.85.0.54/24
now the way it is supposed to work is the...
I'm trying to only allow UDP Traffic that is between 49152 though 53246 to a Specific host. I thought this was what I was supposed to do, though we had someone come on and do a DoS attack on port 53.
access-list outside_access_in extended permit ud...
Hi everyone.
Please could someone explain me for what purpose is needed option "enable traffic between two or more interfaces which are configured with same security level". I am confused, because in any case i should add Permit ACL from one interfac...
Hello all,
On ASA 5508 with firepower, ASDM ASA firepower monitoring/real time eventing not showing any logs. Access control policy have logging enable
( Log at Beginning and End of Connection ) and send to Event viewer is checked. On dashboard i h...
Hi, i'm having trouble with getting PC's to communicate in my topology with my ASA in the middle of it. Basically i have an ASA connected to a switch that connects to 2 PC's, but nothing is pinging, the ASA can ping its own VLAN interfaces but thats ...
We have many SIP server behind ASA 5500 firewall, when we have some kind of small SIP attack of more traffic it fill my connection table and start dropping packet. Can i disable connection tracking for UDP or SIP? I knew ASA is stateful firewall bu...
Hello Team,
I've tried to upgrade our IPS module unfortunately I got an error when upgrading our sensor "Error: execUpgradeSoftware : socket error: 113". Ca anyone help me on this case.
Hello,
I'm trying to open up port 2001 to my alarm company and I don't seem to be having any success.
Here's my config:
Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores):ASA Version 9.4(1)!names!interface GigabitE...
Hello all,
I have been using a PIX 501 running 6.3(5) as my home gateway router for years. Over the last year or so I have had intermittent problems with users getting access to the internet...mainly when guests come to the house. And in the last mo...
Hey Folks,I was reviewing the capabilities of the Cisco ASA 5585x Firewalls and I noticed that they have the ability to tie Identities to Firewall Rules. I had a lengthy conversation with a technical Cisco resource and understand the capability (whic...
Hello! Have some problems with FireSight and FirePower.With Synchronization.Error on FIRESIGHT-Module Time Synchronization Status: 170.1.1.100 is out-of-syncWhat I have:Time on FirePower 10:35, but if a see this time on FireSight it look as 13:35Time...
Hi,
I have established an IPSec VPN Connection, and created access list to allow traffic to some internal resources through VPN.
But when I try to allow internet access to an internal resource by using NAT, the VPN to this resource be disconnected.
...
by ASA version 9.4:
how can i deny video streaming like YouTube?
how can i deny specific URL like Facebook but i don't have URL FILTERING SERVERS License?
Would anyone be able to shed some light on my small problem. Its probably a really simple thing I have overlooked.
I am trying to allow a 3rd party to RDP to one of our servers using a custom port.
I have set up an access rule on our ASA 5515-X usin...
