Network Security

Resolved! What is relation between CA certificate and identity certificate ?

Hi When I try to configure ASA through ASDM. There are CA certificate and identity certificate in the ASDM. Please see the picture in attachment. Anyone can explain the difference and relation between CA certificate and identity certificate ? Thank ...

Resolved! NTP in ASA cannot work

Hi Anyone can take a the commands. Why NTP in ASA cannot work ? Thank you ASA1(config)# sh run ntp ntp server 12.1.1.1 source outsideASA1(config)# ASA1(config)# sh ntp statuClock is unsynchronized, stratum 16, no reference clocknominal freq is 99.99...

Resolved! Automatic Applying Intrusion Policies to multiple sensors at same time.

Hi Everyone, Under SystemUpdatesRule updatesOn Defence center 750 we have enabled the option to download new rules and apply the policies automaticall to all sensors.But lately i am seeing that policie apply on sensor is failing.It will apply on on...

ASA: ESMTP inspection with TLS for some hosts and without TLS for other hosts

Hi all, I want to enable ESMTP inspection on one ASA, but since a have devices which don´t support TLS I was wondering how to enable ESMTP with TLS inspection for some hosts and ESMTP without TLS inspection for the others. I added the line "esmtp tls...

ISP Load Balancing

Hi,I have a Cisco ASA 5510 Firewall and i am using two internet connections for failover. My ISP1 is always up and has VPN's but my ISP2 will only come up when ever the ISP1 is down. I am using SLA tracking to achieve that.I want to use ISP1 for only...

Doubt License - Manage Firepower with ASDM and Firesight

Hi, I have the follow question, I´m using the ASDM to manage firepower , with the follow License key, and alreday applied the TAMC License : But now i will use the Firesight to manage firepower, with follow license key of Firesight: I have to buy a...

Dynamic Pat asa 9.1(2)

I am trying ti simply configure Dynamic pat but getting the (nat-xlate-failed) NAT failed. Tried all possible permutations and combinations but does not seem to be working. Phase: 1Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfig:Additional Infor...

ASA 5505 PPPOE with ADSL Modem/Provider not working

ASA 5505 PPPOE client with ADSL Modem/Provider is not working. Laptop as a PPPOE client is able to connect to the internet without issues. Output of the PPPOE debugs are as follows:DC1ASA-5505(config)# PPPoE: send_padi:(Snd) Dest:ffff.ffff.ffff Src:0...

ASA nat proxy don't work

Hello.Could anybody explain what's wrong with my configuration?I have ASA ASA-5525-X with 9.12 software. Outside interface has 3 real address ranges from ISP. Inside network's (9 distinct LANs) users access the Internet through one ip address. It's o...

Resolved! ASA5505 don't allow FTP access from outside.

I'm new to CISCO and ACLs and NATs but I'm willing to learn.I am having problems allowing FTP access through my ASA5505 ASA 9.2 (2) ASDM 7.3(3)I started pulling configs OFF google and I see stuff I don't understand plus stuff about having to allow ot...

Resolved! Setting up NAT on an ASA 5520

I am trying to get outgoing NAT working on an ASA 5520 with little successTest Host address: 10.200.100.36Destniation IP: 216.34.181.96NAT rules:# show running-config global global (outside) 101 interface# show running-config ...

FWSM migration to ASA 5585-S10X-K9;

FWSM migration to ASA 5585-S10X-K9; ASA's, I understand, do NOT support the use of VLANs (we have 4 on FWSM)--basic question is, will each of the previous VLANS on FWSM now be connected to a separate NIC on the ASA, or can one NIC on the ASA host th...

Resolved! Cisco ASA 5505 Hashing Support

Hello, I have a question regarding ASA 5505 and supports for SHA2 hashing. Is this an option with the right IOS or license, or does this model have no support at all for it? Thanks in advance!

Resolved! Can one ASA SSH onto another ASA ?

Hi Two ASA can ping each other. Do you think one ASA can start SSH(or telnet) onto another ASA or other devices ? Thank you

WCCP redirection not working properly due to router ID

I have a setup that has two firewalls. Our webfilter running WCCP is on the inside of the second firewall. WCCP redirection is configured on the second firewall. ISP ----> ASA5520 ----> WAN ----> ASA5515 ----> filter When I enable WCCP on the ASA5520...

Network Security

Forum Posts

Resolved! What is relation between CA certificate and identity certificate ?

Resolved! NTP in ASA cannot work

Resolved! Automatic Applying Intrusion Policies to multiple sensors at same time.

ASA: ESMTP inspection with TLS for some hosts and without TLS for other hosts

ISP Load Balancing

Doubt License - Manage Firepower with ASDM and Firesight

Dynamic Pat asa 9.1(2)

ASA 5505 PPPOE with ADSL Modem/Provider not working

ASA nat proxy don't work

Resolved! ASA5505 don't allow FTP access from outside.

Resolved! Setting up NAT on an ASA 5520

FWSM migration to ASA 5585-S10X-K9;

Resolved! Cisco ASA 5505 Hashing Support

Resolved! Can one ASA SSH onto another ASA ?

WCCP redirection not working properly due to router ID

Reuse Object Group in a single ACL line

CSCwm49782 - enhance sma 2nd cruz heartbeat logging

Security Intelligence feed/list change alerts

FMC 7.4 and multi-instance FPR3130 chassis upgrades

Announcing the release of Firewall Migration Tool Version 7.7.10

Snort3 rate filter

PBR with AnyConnect

FMC: Automatic renew certificates?

Finding the forgotten IP address of a Cisco PIX 506E

Nexus using sha256 authentication for NTP