Network Security

Resolved! DNS not working whenever crypto map is applied to interface

Hi guys, I don't understand why the ASA is not able to resolve names whenever I apply following command:crypto map [map_name] interface outsideWithout above command the ASA will be able to resolve names immediately without issue. Without command abov...

Best way to reload an asa config?

Hello,I've been thinking of 2 scenarios that could happen and I woud like to be ready. If a config error was made on our ASA (we have 2 in active/standby mode) what is the best way to recover assuming we have a tftp backup or local flash copy? I kn...

Resolved! Cisco ASA 5512

Hi Guys, I have a basic setup. I have a cisco ASA5512 Gig0 is connected to the internetGig1 is the 'inside' network which has an ip of 192.168.35.254 this plug into our switch on the LANwe do not have an management interface setup.My questions is doe...

Problem web from the LAN Cisco ASA 5515-X 8.6

There is a situation I have a 5515-x handle with version 8.6 and a theme dns when users navigate your website dns resolves public addresses when making this internal users obvimente not reach the site, but from the internet no problem, the dns turn i...

ASA Firewall VPN Client Error

Dear Techies,Following messages are generating on ASA and when it starts generating our VPN client (remote users) failed to pass thourgh IKE phase and VPN client get a message "VPN CLIENT ERROR".We clear all vpn session and also reapply cryto map for...

Resolved! Cisco ASA security level and explicit deny ACL

Hi allquick question: -what is the point having cisco ASA interfaces on diffierent security levels when you have an explicit deny ACL?I have configured my ASA with all interfaces (inside, outside and DMZ) on same security level (100) and some ACLs to...

Connectivity issue PIX

Hello,I have a PIX firewall with inside, outside, dmz1 and dmz2 interface.nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 dmz1 security80nameif ethernet3 dmz2 security70I can run icmp echo request from inside to ...

cisco asa stopping PC from joining domain?

guysI have a windows NT domain controller and windows NT PC, I want to join the PC to the domain (with a cisco asa 5512-x in between)both the domain controller and NT PC are connected directly to the firewall and on the same security level too (its s...

Resolved! Testing IPS modules on ASA 5505

How do you all test the IPS traffic on the AIP-SSC5 in a 5505, since the default signatures are retired and you can't unretire them, one cannot enable the signatures 2000-2012 on the 5505.

Resolved! syncing configs

Hi, I've configured firewall 1 by pasting in the config from the existing firewall that I will be replacing. Now I want to sync the config with firewall 2. What must I configure on Firewall 2 to make this happen when I attach the firewalls over the ...

IPS-4200 IDM-HTTPS & Browser

Hello,although we all know he problem of Cisco IPS's with Java, and knowing that java vulnerabilities are increasing, updating Java version is not allowed else we lose the ability to open IDM for the IPS's.Another thing is appearing now, is that I wi...

Resolved! ASA 5525-X Cluster Pool must be configured in this interface error

Hi guys, I previously have both my ASA 5525-X with cluster configurations. Recently, I decided to remove the cluster configuration and issued a write erase and reload the ASA. However, when Im trying to configure an ip address on any interface it sho...

Resolved! ASA 5512X logging to either SSD Drive or USB

I like to capture the syslogs to either the option of installing a 100GB SSD drive, or USB, what would be the best route?

SMTP logging filter in Cisco ASDM

Hi, I have a Cisco 5510. I am using Symantec Message Labs cloud for filtering emails for SPAM. Once they are filtered, they are then sent to my ASA firewall. Apparently there are some emails after being filtered that are being forwarded to my firewal...

ASA Access-List Denies TCP Response (established) traffic even though XLATE exists

Good Evening,Recently, I'm having difficulty with my home office connectivity. I have a 5510 ASA configured for dynamic PAT using the outside interface. The setup is pretty basic, but I've noticed that HTTP/HTTPS traffic is getting denied coming ba...

Network Security

Forum Posts

Resolved! DNS not working whenever crypto map is applied to interface

Best way to reload an asa config?

Resolved! Cisco ASA 5512

Problem web from the LAN Cisco ASA 5515-X 8.6

ASA Firewall VPN Client Error

Resolved! Cisco ASA security level and explicit deny ACL

Connectivity issue PIX

cisco asa stopping PC from joining domain?

Resolved! Testing IPS modules on ASA 5505

Resolved! syncing configs

IPS-4200 IDM-HTTPS & Browser

Resolved! ASA 5525-X Cluster Pool must be configured in this interface error

Resolved! ASA 5512X logging to either SSD Drive or USB

SMTP logging filter in Cisco ASDM

ASA Access-List Denies TCP Response (established) traffic even though XLATE exists

Congratulations to all the winners of the April 2023 Spotlight Award!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Migration of Cisco configuration ASA 5515 to Meraki MX 85 Firewall

New: Cisco Secure Firewall 4200 Series appliance featuring the 7.4 OS

Failed to Generate Report on FMC

Cisco Secure Firewall - System Provided Application Detection Info ?

classifying hosts in StealthWatch 7.4.2 datastore

GeoDB Updates file

Firepower 2120 lost configuration

Can I backup firepower license? (ASA 5516-X with firepower)

Is it OK that FPR 1010 doesn't communicate with license server?

Cisco Firepower VS Fortinet SDWAN