All,I am having an issue whereby all my static NAT rules are failing.ASDM Logging states:4 Aug 24 2015 06:42:46 106023 213.x.x.58 59500 Out-TMG_RIPE_NAT 443 Deny tcp src outside:213.205.251.58/59500 dst outside:Out-TMG_RIPE_NAT/443 by access-group "o...
I'm trying to get traffic to pass correctly between two interfaces on our ASA 5512 - the "inside" (192.168.1.X) interface and the "DMZ" (192.168.100.X) interface.Using the packet tracer I find that I can I can easily send packets between a source IP ...
Unboxed a new ASA5506-X, powered up and started following the quick start guide. I don't have a inside switch and don't need the Firepower configured. I connected a PC to gi1/2, received an IP address 192.168.1.5. According to the Quick Start Guid...
I'm trying to get my head wrapped around the multi-context packet classifier used by the ASA when a shared outside interface is used. Below is what I think I think (props to Peter King at Sports Illustrated); could someone please point out the errors...
Hi, With online docs I can't figure wether Nat in general (and specifically Destination NAT) is supported in ASA virtual context.Does anyone know bout that ? Pascal
Hi,I've got a 2960-x running SSHv1.1) I need to disable SSHv1 and only run V2. Will the line listed below run ONLY SSHv2 and disable V1?2) I need a cisco document that says SSHv1 can be completely disabled and only V2 runs on a 2960x.I know that I n...
Dear All, This is my first post in the Cisco community. We bought a ASA 5506-X and it is already configured. The ASA came with a base license already installed. In the box was a sheet with the PAK key (Control license). I tried to register the PAK ke...
Hi,I have ASA Firewall that will host both our Anyconnect VPN and clientless SSL Webvpn. I am planning to install public CA cert. It will require two certs , one for each vpn. The ASA hostname will not be just a regular firewall hostname. I am cautio...
Hi everyone, I have ASA5520 configured with below interfacesinterface Ethernet0/3 nameif VISITOR security-level 50 ip address 192.168.2.1 255.255.255.0 interface Ethernet0/1 description Connection to ISP SHAW nameif outside security-level 0 ip addr...
HiI have a HA pair of firewalls with single Public IP. On the inside I just have a directly connected network with a /24 subnet. I host a few management applications on the internal network and a Windows Server.I want to RDP into my Windows Server fr...
I have a ASA 5505 set up as a DHCP server at a customer site. I have 3 clients connected to the inside interface. The outside interface is connected to my Comcast cable modem. Initially after firewall reload (reboot), all works as expected All thr...
Hi I noticed that reflexive ACL are missing on the 4300 routers ( particularly on the IOS 15.4(3)S2 )The keywords evaluate and reflective are missing there:# permit ip 10.1.1.0 0.0.0.255 any reflect r-out timeout 300% Invalid input detected at '^' ma...
Hi there I'm using a Cisco asa 5506-x device with the ASDM version 7.4 I'm trying to allow for users to RDP into my computers on a network. I've created a NAT Network object with the IP address of the device, and the port I want it to allow RDP into ...
Guys, Could anyone explain me why to use Active/Active Mode on Firewalls?Also please provide all disadvantages of using this mode, from what I heard such mode could create many potential issues
On a 5545-x, we have a 50-context license. Currently, we show that we are at 50 contexts but this includes the admin context. SHould I be able to add another another context or does the admin context max this out? Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
