Hi Everyone, I configured and converted ASA from 8.2 to 9.1 In 9.1 i do see config like asdm location 10.0.0.0 255.0.0.0 Inside Need to know should i remove this config? Also what is use of this config? Secondly in 8.2 i have this config vpn-tunnel-...
Hi everyone, I need to create 5 ipsec l2l tunnels to remote sites. Need to confirm i can only use single ASA physical interface to do this? Regards MAhesh
Hello, We have an ASA 5510 that was running stable on 9.1(5)21 with ASDM 7.3.2. After upgrading to 9.1.7 and ASDM 7.5.2-153 per CVE-2016-1287 from Cisco we are seeing issues with users being able to connect using AnyConnect or the SSL WebVPN and we ...
Hello. I have a question regarding interface ACL's and IPsec VPN tunnels that was prompted by this advisory. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike A VPN connection has many traffic components ...
Hi everyone, Just wondering if I could tackle this vuln using an ACL allowing only IKE1/2 traffic for selected VPN peers. Would that block any UDP crafted packets from getting through the ASA ipsec engine? Awaiting your comments, Theo.
Hi there... I have recently installed a 5506 at a customer WHO has two servers that needs NAT. One of them is a web server on a DMZ and i have enabled NAT with a public ip on src: DMZ, dest.:OUTSIDE. Also i have made two access rules that allows OUTS...
We have Cisco WS-C3850-48T L3 switch and i am going to configure PBR on it, does anyone know what could be the impact? If i apply policy to specific interface then PBR will only apply on that specific interface traffic right? it won't apply on global...
Hello, can someone please explain to me what the Product code L-ASAV5S-STD-8 means? What does 8-pack mean (8 Users, 8 Hosts, 8 Ports,...)? I would like to set up a virtual lab for Proof of concepts, Testing and Troubleshooting. I'm just a freelancer...
Hi, I recall reading wccp can only redirect to the ASA inside. On the new 5506 that have no switch ports, this creates an issue where a webfilter was directly connected previously and obviously cannot now. Is that wccp restriction truly only inside?...
Hey guys, I'd like some help with port forwarding on a 5505 running 9.2(4) code. I'm trying to forward requests on port 80 on my outside, ISP provided IP to port 8000 on an internal server. Everything inside the ASA is PATing on the outside address. ...
We have external customers that access to our ASA public "outside" IP to reach web servers within our DMZ . Trust is enabled with public certificates assigned on the "outside" interface. We also have external employees that need to connect to this sa...
Hi all, Please is there any solution, how to block a website on specific time (for example only between 12:00PM and 14:00PM, we can open a specific website, after this time it becomes blocked) Thanks in advance
Hi Team, I have downloaded the Firesight Management Center Virtual file but I can´t open it. The extension is ¨.SH¨ as you can see in fhe following information that I´ve obtained from Cisco.com web page: Cisco FireSIGHT Management Center Patch Sourc...
My customer Sourcefire 3D7120 sensor GUI admin could not login ( message : unable to authorize access) ,but ssh admin login OK. Any suggestions?
Hi All, I have an ASA with an outside, DMZ and inside interface configured and acting as my core internet firewall. I have an FTP server in the DMZ that outside users are permitted to use. Outside security level is 0, DMZ 50, inside 100. My ACL for...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-22-2026 07:48 PM | ||
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM |
| User | Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
