We're looking at exposing a service to the public interface, but want to lock it down to only specified MAC addresses and/or IPs being allowed to access it. From what I understand from this thread - https://supportforums.cisco.com/discussion/1175409...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(2) -
APIs
(1) -
Appliances
(17) -
ASA
(1) -
Branch Router
(1) -
Buying Recommendation
(81) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,338) -
Cisco Bugs
(63) -
Cisco Cafe
(15) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(140) -
Cisco Firepower Device Manager (FDM)
(768) -
Cisco Firepower Management Center (FMC)
(2,700) -
Cisco Firepower Threat Defense (FTD)
(2,986) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(57) -
Cisco Secure Firewall Management Center (FMC)
(282) -
Cisco Secure Firewall Threat Defense (FTD)
(340) -
Cisco Security Cloud Control
(17) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(20) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(45) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(2) -
Community Bug or Issue
(1) -
Community Feedback Forum
(26) -
Community Ideas
(12) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(238) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(14) -
Firepower Management Center (FMC)
(383) -
Firepower Threat Defense (FTD)
(206) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,051) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(8) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,519) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(6) -
License
(307) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(87) -
Network Security
(2) -
NFVIS
(1) -
NGFW Firewalls
(37,236) -
NGIPS
(1,794) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(3) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(3) -
Other Network Security Topics
(10,662) -
Other Networking
(9) -
Other Routers
(8) -
Other Routing
(22) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Physical Security
(19) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(1) -
Room Endpoints
(1) -
Routing Protocols
(8) -
SD-WAN Security
(1) -
Security
(5) -
Security Management
(566) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(27) -
VPN and AnyConnect
(1) -
Vulnerability Management
(43) -
WAN
(7) -
Web Security
(4) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Got a shinny brand new ASA5506W. ver. 9.4(1) ASDM 7.4(1) . First time working with them. ***Note to Cisco - I'm disappointed that it is not clearly stated that the ports are not switch ports. With your marketing material it is very easy to assume t...
Resolved! Turning off SSLv3 on an ASA 5525
I have two ASA 5525s in a HA pair. Both are running version 9.0(2). I have tried to turn off sslv3 but it doesn't seem to work. My ssl configurationssl server-version tlsv1ssl client-version tlsv1-onlyssl encryption aes128-sha1 aes256-sha1ssl trus...
I have the FireSIGHT Management Center set up and I have a 90 day license for url filtering/malware. I have registered the licenses on the FMC, and added a 5506 to the console. But I can't seem to apply the available license to the 5506. So I'm un...
Resolved! clearing access lists
Hi GuysI want to clear unused acl rules using hit counts to identify what acls are in use. The problem is when I do show access-list any acl using an object group splits into several lines, showing an acl for each member of the group with the same li...
Hello, I have an ASA firewall (a 5550) running in routed mode with three different IPs on it and it is doing fine. Now people want to change the config to transparent mode, with two inside interfaces and one outside - so the two inside networks woul...
Dear ALL, I have an ASA 5520 with 60% CPU usage related to dispatch unit.I am going to buy a new ASA.How can I compare ASA models based on their dispatch unit processing capacity? ThanksAli
Hello, I understand that "ip dhcp snooping" turns on the snooping capabilities and you have to trust a link for a dhcp.I just don't understand the ip dhcp snooping vlan ## command. can someone please explain this command.
Resolved! Virtual IPS/IDS design question.
Hi! I'm having some problems with understanding the design of virtual IPS/IDS.I know how to do it with hardware IPS/IDS, when you have one physical interfaces specified to handle traffic and another physical interface to to send inspected traffic bac...
Hi, I need help with a DMZ on our edge network and a ton of web servers that are in the DMZ from two different /24 subnets..We have 2 x /24 public subnets that are routed to us from our ISP (63.241.163.0 and 63.241.172.0). Our ISP routes them to our ...
Resolved! ASA5500-SSL-10 Licensing
Hi Guys, I'm sure this has been asked before but i can't find the answer, My client wants to run 2 ASA's as HA pair with a ASA5500-SSL-10 license installed will he need a license for both machines or just one Many Thanks
I need to connect a device to make Internet cache (CacheFlow) with a single interface using a Cisco ASA Firewall PBR to redirect user traffic on the LAN. The device that makes cache, necessarily requires the PBThe flow of information must start from ...
I've seen mixed configurations where someone will explicitly create an inspection rule using an intrusion policy and then other cases where someone has created an inspection rule only for files (no intrusion policy) but then configures the intrusion ...
I have two cisco asa 5516-X in failover. How to make so that failover on worked on a module sfr status?
hi,firstly i don't think that we have any problems with two kind of licenses. but i found that, if i also have Firepower and ASA firewall in data center, there are some issues below:.If you buy IPS subscription license on FirePower, BotNet update on ...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 6 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
