Hi I am trying to understand the concept on source NAT (not sure if this is the same as Twice NAT).So I have attached a sample topology. I am in the process of migrating from watchguard firewalls to cisco ASAs, and during the migration I have come ac...
Hi guys, I need some support as i just came across a cisco ASA thats being used for NAT and I have to change the public IP of its WAN interface along with default gateway I am pasting the configs below with assumed IPs (10.10.1.0/29) instead of publi...
Need help in configuring internet access for a particular sub-net on an ASA 5525 firewall.I am pretty new to ASA. From the configuration, all sub-nets are in a separate vlan and all the vlans configured have internet access. I introduced a new vlan...
Dear All,I am having this issue on a new/clean installation of CSM 4.7 without any firewalls managed (originally installed 4.3 then upgraded to 4.5 and 4.7).The issue was not there with CSM4.1 (Common services 3.3.0) The CMFOGSServer.log file is grow...
Hi all, I've been scratching my head but the reflective ACL is not working as I thought it would.I have a computer connected to the router, I have NAT configured and I can reach the internet fine.When I configure the reflextive ACL, I cannot get ping...
I have a Nexus 5k with a 10k sfp configured for vlan 800 along with another port also configured for 800. This goes into an edge router which then goes into the outside interface of an asa 5545 (had to do it this way temporarily because I did not h...
Is there in FireSIGHT a tool similar to ASDM Packet Tracer to test the hoops that a packet has to go through in Sourcefire Service module? (Or maybe there is a CLI command in sfr similar to asa privilege command: packet tracer input inside tcp 10....
Hi, I'm new to firewallingI'm trying to upgrade from ASA Ver 7.1(2) to ASA Version 9.2(2)4 Im having trouble with global NAT I have the following configaccess-list nonat extended permit ip any any nat (inside) 0 access-list nonat However new version ...
Hi, Can someone tell me where I can find all features supported on ASA Firepower devices?For example if I want to check what are supported features on routers/switches i`m using feature navigator.When i add the router/switch model, the IOS version an...
Hi, Is there a method to increase the maximum number of vlans on the ASA 5585-X series firewall?I see the ASA data sheet indicates a maximum 1024 Vlans but shows this number with a base license.Thank youFrank
Hi,can the ASA send different severity syslogs to different syslog servers?I see the introduction of custom logging lists... but you can only specify a single logging list to be used for traps... rather than associating a logging list to a specific l...
Hey everyone, Today I was asked to TSHOOT an issue with one of our customer's ASA. Issue:The local IT staff wants to access the HQ ASA via ASDM from a site to site VPN remote end location. (10.0.2.0 /24 subnet)to the local ASA inside LAN interface 10...
Hello guys.Can not solve the problem. if it is solved.I need to download a certificate to decrypt SSL. Doing all the official b_User_Guide_for_ASA_CX_and_PRSM_9_2.pdf a manual, but here I did not find a detailed description of the certificates. I hav...
