Network Security

Accessing a public facing server from an inside port

I've been fighting with this for hours and can't seem to make any sense of it. I prefer instructions for ASDM 7.3. I'm learning the CLI, but I'm converting from an RV320 and GUI is more friendly to me at the moment.My inside interface is 192.168.1.0/...

Resolved! ASA 9.2(2)4 vs 8.2(5)26 inter-interface routing

Hello,we are migrating networks from our old ASA to new one. We have problem with security levels and enabling traffic between same security levels.I have situation where I have 10+ customers in same FW and mostly same security level.Nameifs- Custome...

Resolved! How to only allow internet access.

I've got an ASA with two "outside" interfaces and twelve "inside" interfaces.I'd like to separate the Access Lists between outside access and inside access. By default I'd like the inside interfaces access to the internet and nothing else and then bu...

IPS Subscription for ASA5545-IPS-K9

My customer has the following - ASA5545-IPS-K9 and previously we have purchased both hardware support AND IPS Signature updates. However, we now discover that he has L-ASA5545-IP3Y= (ASA 5545-X NGFW IPS 3Year (eDel))If he has the 3 year subscription ...

SourceFire: VDB rollback

Hi,I would like to know how can I rollback the VDB version on FireSIGHT aka Defence Center? Assume my current VDB is 248 and I would like to rollback to 246. Please advice. Thanks. Regards,Zaw Min Oo

Resolved! Firewall Interface for migration

Hi Team, My customer using ASA5510 firewall and they'll have Internet(outside) interface migration, i need to bring up the secondary internet now before the migration. I intend to use available interface but found license is limited to max 4 interfac...

Resolved! ASA 5505 Failover license compatible issue

I am trying to setup a failover ASA 5505 to provide HA to current ASA 5505 in production. The following is current failover setup:###############################failoverfailover lan unit primaryfailover lan interface failover Vlan3failover key *****f...

Resolved! Telnet and SSH issue on Cisco 3750.

I enable on Cisco 3750 and all of sudden I was not able to login into the box. I even changed the source interface and update the transport input method under the VTY lines, no luck. Then I choose to disable SSH by removing the pertaining configs li...

Resolved! ASA Firepower services Web Proxy

I was wondering is there any way of configuring http and https web proxy on the ASA with firepower services?Regards,Cesar

Resolved! ASA 5505 - Additional DHCP scope - Clients can't reach internet

Good afternoon, Firewall:Cisco ASA 5505v 8.2(5)Security Plus LicenseSwitch (not important):Netgear FS726TPFirmware Version 2.0.1_09The goal:Add two additional VLAN'sEach with their own DHCP scopesThe VLAN's separate from each otherClients able to get...

fail to register SFR module

I am failing to register my ASA with Sourcefire module. I see in the V DC that the syslog says it connected to the module successfully, but fails to authenticate“sftunneld:sf_ssl [WARN] VerifyConnect:Failed to authenticate or to be authenticated by p...

Resolved! TCP Reset -I ASA Packet capture output and Mac address info

Hi Everyone, I was troubleshooting the ASA issue where user was getting TCP reset II did packet capture on both directions and when i check packet detail it showed vlan info and 2 mac addresses with message FLAG R.I found that first mac address and...

Resolved! Allow routing for return traffic from ASA

Hi everyone, I am trying to fix the routing issue in ASA. Layer 3 traffic flowPC-----L3 switch1------int x-------ASA--int y----Layer 3 switch2 --- serverHere traffic flow is allowed from PC to server.But for return traffic from server to PC via AS...

Web Defence admin password locked.

Hi All, Good day. I am in need or urgent assistance. I created a new user account on the firesource defence centre as read only and the moment that was created all my admin accounts are failing login. It is requesting for us to contact the administr...