Hello I need to setup an inbound nat rule using the following: - inbound nat will be 168.97.45.6- translation ip will be 209.165.201.3 - outside host 208.45.6.7 What would be the best way to create this rule?
Hi,I am trying to understand ASA threat-detection feature but I have not been able to find much details. How can I see what criteria is used by ASA to determine if a connection is threat? Any documentation detailing this !
Last Modified:Jun 19,2015Known Affected Releases:9.1(6)9.1(6.1)Status:OpenSeverity:2 SevereProduct:Cisco ASA 5500-X Series Next-Generation FirewallsSupport Cases:1 ___________________________________________________ How exactly are ASAs affected / vu...
Hi All, The asa55xx is running that "shav1 and DH group 2 setting" for site-to-site VPN.We want change the setting to "shav2 and DH group 5".Can we change to above the setting on the asa55xx ?? Kindly,
hi out there I am trying to get most out of a 5506 with sourcefire - I direct trough the default global ploicy *any* traffic trough the sfr module.I can also verify that it Works by f.ex defining a facebook free Network which would block facebook. - ...
Hi I read several documents about SSL vpn. But I could not find what is exact meaning of "clientless". Anyone can give me explanation or link ? Thank you
Hello, I am investigating why an ASA that has two circuits didn't failover when the primary line failed. Looking at the config of the ASA the interface that connects the ASA to the secondary has been giventhe name 'failover'. I am able to ping my own...
I have two ASA 5505's (9.02 firmware) configured to establish an IPSec tunnel across a private network. A web server hangs off the inside of one ASA, while the second ASA has a host connected on the inside that requires access to the server. The outs...
After doing some research I find that setting up ip tcp synwait-time in the asa isn't as straight forward as it is for a switch.Apparently I need to create a policy-group to deploy this.I have seen a couple of examples but haven't read a cisco docume...
We have an asa 5525 that went online last month. Because of the nature of our business, we don't block users from going anywhere. Over the last two days, users are unable to get to facebook. Upon investigating this, I've found that if you are a re...
Hello againI have problem in my serverI have ESXI server and cisco router 2800 everything connected with the internet inside the router i have som access-listpermit my ipsdeny any anyinside the server i dont have internet wen i disabled the access-li...
Hi, I use an old ASA (5510). It is used as ssl concentrator for my anyconnect users.It works well but last build available doesn't support TLS v1.2.I can't change hardware quickly. So TLS v1.2 is in the roadmap or not to support old ASA models ? it's...
Can anybody explain be difference between Cisco Security Manager and Firesight Management Centre?I have cisco ASA5585-X SSP-40 ( without Firepower module) and ASA5585-X SSP-60( with Firepower SSP-60 module). Can Cisco Firesight Management Centre be...
