Network Security

Resolved! ASA 9.1(2) drops PING (icmp codes 0 & 8)

Hi Im trying to ping DMZ interface on ASA from INSIDE host and vise versa. It does not work :( Tried to debug icmp however the icmp packet did not even hit the DMZ interface from the particular host. Doing this with packet-tracer, ASA shows all resul...

ASA IOS version 9.4 Destination NAT, assistance required

Hi All, Presently, we are in a phase to migrate the whole Security devices from Juniper to ASA. the ASA version running on the device is: 9.4.Below is the nat configuration of the Juniper box. static { rule-set All-ATMs-to-Radia { from zone...

Cisco ASA 5515-X Problem

Hi guys,I'm currently deploying a cisco ASA 5515-X.The customer has 5520 currently installed and looking to replace it.However, problem is the web server at the DMZ displays error 500 when accessed from the web and inside.This is after I've permitted...

cisco ASA-5515-X LED Alarm is amber

I have the following problem the cisco ASA-5515-X LED Alarm is amber, I can't log onto asa by console

ASA5505 upgrade issues...

I was trying to upgrade my ASA 5505 through GUI asdm-idm launcher to 9.6.3. I just selected Adaptive Security Appliance (ASA) Software 9.6.3 version to be upgraded . The upgrade went OK, but now I'm not able to launch Cisco asdm-idm launcher. I ...

how to configure Cisco ASA 5512 ver 9.2 Connection to internet??

Hi,I would like to ask how to configure Cisco ASA 5512 er 9.2 nat for translation.nat-control and global etc is not working.any idea?thanks

can't ping inside interfaces on asa from switch

Peace,I have asa 5520 with sub interfaces inside, i can ping hosts on the inside networks but i can't ping the inside interfaces themselves from an attached nexus switch. it would make troubleshooting a lot easier if i can ping the gateway. So is the...

FWSM multiple context without license

Hi,is it possible to configure FWSM in multiple context mode without "virtual FW licensing"? it seems without multiple context lisence FWSM support 2 context.i need to know can i use these two context and configure fwsm in multiple context mode and ...

CSM 4.8 - Error loading page: NAT - Address Pools

HalloDoes anybody know how this bug was fixed ?https://tools.cisco.com/bugsearch/bug/CSCut55025 sincerley

Resolved! Source NAT Cisco ASA

Hi I am trying to understand the concept on source NAT (not sure if this is the same as Twice NAT).So I have attached a sample topology. I am in the process of migrating from watchguard firewalls to cisco ASAs, and during the migration I have come ac...

HELP! NAT on Cisco ASA

Hi guys, I need some support as i just came across a cisco ASA thats being used for NAT and I have to change the public IP of its WAN interface along with default gateway I am pasting the configs below with assumed IPs (10.10.1.0/29) instead of publi...

ASA 5525 configuration

Need help in configuring internet access for a particular sub-net on an ASA 5525 firewall.I am pretty new to ASA. From the configuration, all sub-nets are in a separate vlan and all the vlans configured have internet access. I introduced a new vlan...

CSM 4.7 possible bug??

Dear All,I am having this issue on a new/clean installation of CSM 4.7 without any firewalls managed (originally installed 4.3 then upgraded to 4.5 and 4.7).The issue was not there with CSM4.1 (Common services 3.3.0) The CMFOGSServer.log file is grow...

Reflexive ACL not working as expected ICMP

Hi all, I've been scratching my head but the reflective ACL is not working as I thought it would.I have a computer connected to the router, I have NAT configured and I can reach the internet fine.When I configure the reflextive ACL, I cannot get ping...