Network Security

ASA 5506-X license key

Dear All, This is my first post in the Cisco community. We bought a ASA 5506-X and it is already configured. The ASA came with a base license already installed. In the box was a sheet with the PAK key (Control license). I tried to register the PAK ke...

Wildcard SSL cert on ASA

Hi,I have ASA Firewall that will host both our Anyconnect VPN and clientless SSL Webvpn. I am planning to install public CA cert. It will require two certs , one for each vpn. The ASA hostname will not be just a regular firewall hostname. I am cautio...

Resolved! %ASA-3-305006: portmap translation creation failed

Hi everyone, I have ASA5520 configured with below interfacesinterface Ethernet0/3 nameif VISITOR security-level 50 ip address 192.168.2.1 255.255.255.0 interface Ethernet0/1 description Connection to ISP SHAW nameif outside security-level 0 ip addr...

ASA Cannot connect to internal server

HiI have a HA pair of firewalls with single Public IP. On the inside I just have a directly connected network with a /24 subnet. I host a few management applications on the internal network and a Windows Server.I want to RDP into my Windows Server fr...

ASA 5505 dropping DHCP assignments

I have a ASA 5505 set up as a DHCP server at a customer site. I have 3 clients connected to the inside interface. The outside interface is connected to my Comcast cable modem. Initially after firewall reload (reboot), all works as expected All thr...

Resolved! Reflexive ACL missing on the IOS 15.4(3)S2

Hi I noticed that reflexive ACL are missing on the 4300 routers ( particularly on the IOS 15.4(3)S2 )The keywords evaluate and reflective are missing there:# permit ip 10.1.1.0 0.0.0.255 any reflect r-out timeout 300% Invalid input detected at '^' ma...

Device doesn't allow me to port forward

Hi there I'm using a Cisco asa 5506-x device with the ASDM version 7.4 I'm trying to allow for users to RDP into my computers on a network. I've created a NAT Network object with the IP address of the device, and the port I want it to allow RDP into ...

Firewalls Active/Active Mode

Guys, Could anyone explain me why to use Active/Active Mode on Firewalls?Also please provide all disadvantages of using this mode, from what I heard such mode could create many potential issues

Resolved! ASA Security context licenses

On a 5545-x, we have a 50-context license. Currently, we show that we are at 50 contexts but this includes the admin context. SHould I be able to add another another context or does the admin context max this out? Thanks

Resolved! Cisco 2921 IOS Firewall Configuraiton

helloI have a Cisco 2921 ISR router and want to configure the firewall part, currently I am using this router for corporate network & I have a site-to-site VPN, and currently I am securing the FW/Router only through ACLsasking for your support for th...

Sun-interfaces

Hey guys, I am trying to consolidate 2 different firewalls into another ASA 5520 active/standby firewall, and only have 1 interface available, I wanted to make sure that I can use sub-interface for site-to-site VPN, anyconnect, and also another sub-i...

[scanning] drop rate-1 exceeded messages???

Hello.I am testing a new ASA firewall and am repeatedly getting the following mesages in Syslog[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 7 per second, max configured rate...

ASA 7.2 ACL

Hello,i have created a ACL for inside to outside traffic For details you can see the attachmentI have only permitted the 192.168.1.X series ips but still users who are having ip addresses like 192.168.2.X and 192.168.3.x and so onable to access int...