Resolved! ASA 55XX shav2, DH group 5
Hi All, The asa55xx is running that "shav1 and DH group 2 setting" for site-to-site VPN.We want change the setting to "shav2 and DH group 5".Can we change to above the setting on the asa55xx ?? Kindly,
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(85) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,563) -
Cisco Bugs
(37) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(145) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(21) -
Cisco Secure Firewall Management Center (FMC)
(99) -
Cisco Secure Firewall Threat Defense (FTD)
(128) -
Cisco Security Cloud Control
(6) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(18) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(45) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(261) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(29) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,574) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(321) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(91) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,569) -
NGIPS
(1,873) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,775) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(8) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(638) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(43) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
hi out there I am trying to get most out of a 5506 with sourcefire - I direct trough the default global ploicy *any* traffic trough the sfr module.I can also verify that it Works by f.ex defining a facebook free Network which would block facebook. - ...
Hi I read several documents about SSL vpn. But I could not find what is exact meaning of "clientless". Anyone can give me explanation or link ? Thank you
Hello, I am investigating why an ASA that has two circuits didn't failover when the primary line failed. Looking at the config of the ASA the interface that connects the ASA to the secondary has been giventhe name 'failover'. I am able to ping my own...
I have two ASA 5505's (9.02 firmware) configured to establish an IPSec tunnel across a private network. A web server hangs off the inside of one ASA, while the second ASA has a host connected on the inside that requires access to the server. The outs...
HiI need to create a ASA asdm user who can do read only but also manage an acl from the ASDM interfacei.e. role based users with a mainly read only setup but alsoideally to be able to just enable/disable (manipulate) acl entries i think this is doabl...
Hi ,if we have ASA 5585 SSP10 (Gbps ,65k CPS ) by clustering 2 or more the same , can i achieve performance of ASA 5585 SSP20)thanks
Resolved! Blocking icmp through ASA
config t(config)# policy-map global_policy(config-pmap)# class inspection_default(config-pmap-c)# no inspect icmp(config-pmap-c)# exit(config-pmap)# exit(config)# ping www.google.comType escape sequence to abort.Sending 5, 100-byte ICMP Echos to 21...
After doing some research I find that setting up ip tcp synwait-time in the asa isn't as straight forward as it is for a switch.Apparently I need to create a policy-group to deploy this.I have seen a couple of examples but haven't read a cisco docume...
We have an asa 5525 that went online last month. Because of the nature of our business, we don't block users from going anywhere. Over the last two days, users are unable to get to facebook. Upon investigating this, I've found that if you are a re...
Resolved! Problem About Access-list
Hello againI have problem in my serverI have ESXI server and cisco router 2800 everything connected with the internet inside the router i have som access-listpermit my ipsdeny any anyinside the server i dont have internet wen i disabled the access-li...
Hi, I use an old ASA (5510). It is used as ssl concentrator for my anyconnect users.It works well but last build available doesn't support TLS v1.2.I can't change hardware quickly. So TLS v1.2 is in the roadmap or not to support old ASA models ? it's...
Resolved! CSM vs FMC
Can anybody explain be difference between Cisco Security Manager and Firesight Management Centre?I have cisco ASA5585-X SSP-40 ( without Firepower module) and ASA5585-X SSP-60( with Firepower SSP-60 module). Can Cisco Firesight Management Centre be...
Hello,How can I create a profile for Hewlett Packard printers and allow them onto the network without also allowing any other HP device free access. I only want to allow HP printers. I do not want to allow HP laptops, notepads, desktops, etc.I would ...
Resolved! Inter Context Routing in ASA
Hi All, Need your help with Routing between Context. I have been reading some threads to see how best to do the Routing between two Contexts and what i have gathered is that if you want to Route lets say from Context A to Context B when traffic enter...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 11-13-2025 12:52 PM | ||
| 11-03-2025 09:48 AM | ||
| 10-30-2025 12:44 PM | ||
| 10-23-2025 07:14 AM | ||
| 09-26-2025 12:33 AM |
Top Solution Authors
| User | Count |
|---|---|
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 |
