Hi, I have configured a L2L to 2 different site, A-B, A-C I also configured a remote VPN to site A. When I remote access to site A, I could access LAN on site A but not on Site B and C How do I define NAT exemption for the other sites, B and C? I ...
How to Tshoot s-to-s VPN / Nat on 5510? SIte 1:Outside - 111.1.1.1/30Inside - 10.34.48.0/20 SIte 2:Outside - 222.1.1.1/30Inside - 10.34.16.0/20 For Site1:access-list no-nat-traffic extended permit ip 10.34.48.0 255.255.240.0 10.34.16.0 255.255.240.0a...
Hi All I'm using a Cisco ASA 5550 firewall. I have an external subnet on the internet eg 200.1.1.0/24 and have that subnet routed into our network. Please see the attached diagram. 200.1.1.2 is only used as the external facing management address of f...
Hi, when deploying four ASA firewalls in cluster mode, the health check monitoring cannot be customized like for Active/Passive setup? For example, we don't want a FW member to leave the cluster if the management interface goes down. Another example ...
Hi all, does anyone know where I can find minimum recommended firmware for different ASA platforms?
Hi, I was having some weird NAT behavior with ASA 5500-X running 9.2.2.4. Here's the output of show nat. (IPs and interface names were altered for this post) Manual NAT Policies (Section 1)1 (inside) to (outside) source static obj-10.237.192.0 obj-...
Hello All, I did a swap of ASA 5520 to 5525-X. Nats are working fine but users cannot display the interface when using RDP. The sessions are very slow compared to the old ASA. When I did a rollback to ASA 5520, the RDP sessions are working correcty. ...
Hi, I have configured IOS Zone Based Firewall on my office 871 router. I've made an inspection rules for http, https, icmp and dns for in-out zone. Often I can see in router log the message: %APPFW-3-HTTP_MAX_REQ_EXCEEDED : Number of unanswered HTTP ...
Hello, I would to install a certificate on an ASA so that when I log into it via ASDM, it does not give me the security warning that the site is untrusted. I created an identity CSR on the ASA and received the cert back from my internal CA server and...
Hi I have a new database which is access via the firewall. After 5 minutes of inactivity it times outs. I am wondering whether this is due to the TCP connection timing out although I have not configured anything on the firewall to timeout the connec...
Hello, I have a situation, where I have a defense center version 5.2 (currently end of support), and the GUI is not opening due to some issue/database corruption. I opened a case with cisco and since 5.2 is EoS, they cannot do anything. I tried to re...
Is there a way to tell if a source fire device is blocking without the use of defense center? We have run into a few issues where the device will stop passing traffic or is blocking traffic, but there are no logs (eventhough they are set to log). Is ...
Hello. I have inherited a CSM Application installed on a VM device. I know that it is version 4.8 but I am trying to verify if it is the standard 4.8 release or if it is the 4.8 with SP1 release. The original installation file has been deleted a...
Hello All, Is it possible to install any version of Firesight management center virtual appliance in vmware ESXi 6?. Thanks and Regards
Hi, We have two ASA 5520 working as a failover pair. It is using the GigabitEthernet0/0 interface as a failover interface but now we need that interface for traffic and would like to use the management interface as a faillover interface because we do...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 11-27-2025 05:34 PM | ||
| 11-13-2025 12:52 PM | ||
| 11-03-2025 09:48 AM | ||
| 10-30-2025 12:44 PM | ||
| 10-23-2025 07:14 AM |
| User | Count |
|---|---|
| 5 | |
| 4 | |
| 2 | |
| 2 | |
| 2 |
