Network Security

Cannot add user bassed ACL using ASA abd CDA

Hi, I installed ASA 5525 with CDA and I tried to configure user based ACL without success. When I tried I received the following error message:"Failed to retrieve users from the active directory server. Try checking the server configuration , network...

Resolved! ASA5510 EoL - not clear

Hi, although I see that the ASA5510 is no longer being sold, it is not clear to me when the last date for software patching/maintenance is set for?Most Cisco products that go EoL have a "End of Software Support" date. All I can find for the ASA5510 i...

asa5512-x IPS version

HI, If my Customer buy an ASA5512-K9 and he want to add IPS module into the ASA, is it possible or do he need to replace all of the security Appliance. Also what are the alternative to provide IPS tp an ASA5512-K9 via the web with firepower Thanks

Resolved! 2 External Ports to same Internal Port on ASA

Hi,We have a webserver behind an ASA 5520 which has a static NAT setup to forward TCP port 80 traffic through to the private address of the server on port 80 which is working fine.We are having an issue with one site on the internet being unable to a...

Resolved! Multiple static source NATs to multiple static destination NATs

I have been presented with a NAT scenario that I'm trying to work though, basically it is a src and dst nat like so:nat (inside,outside) source static src1-original src1-translated destination static dst1-original dst1-translated The twist is there a...

Nexus 5548UP with Checkpoint firewall

I know this is a little out of scope, but was hoping someone would have some insight.I have two Checkpoint firewalls connected to Cisco Nexus 5548UPs 10G. I am noticing a lot of dropped RC on the Checkpoint interfaces. I'm wondering if the firewalls ...

ASA 5515-x High Availability Question

Hello ForumI am with a Customer today whom has purchased 2 ASA 5515-x next gen's.They are desiring to have an Active /Standy Failover Pair.When I perform a sho ver on both of the appliances, I can see that they are both licensed for Active/Active. Si...

Self- Signed Certificate - Change RSA Public Key & Signature Algorithim

Hi My 1801 router (IOS 15x) is using the original self signed certificate (1024) with an signature algorithm MD5. I would like to change the cert to a 2048 key length , with a hash of SHA1 or better but I'm unsure how to do this.Should I just generat...

3750-3650 MacSec-TrustSec License

Hi, Our problem is that we need to test macsec-trustsec for show one of our customer the functionality. Cisco sent us several 3750 and 3560 to try. with C3KX-SM-10GT: moduleWe don´t understand that 3750 have the ios right and some command we can´t t...

asa5510

i have asa 5510 and i need IPS on it so i need to know if it software or Module and if it Module which one works with it thanks

Resolved! Incoming SMTP issue with an ASA5512-X

I have reviewed numerous support discussions on this particular issue, but I am still unable to properly configure my ASA 5512-X to receive SMTP email. I can send email, and have access to all other services that I setup. I did create a network obje...

Deny ping on outside interface while allowing inside hosts to ping external hosts

Been wresting with this one for a bit not. Running IOS 9.2 on a ASA5505 Can anyone tell me how I could accomplish this? I know how to disable ping on the outside interface using icmp deny any outside but then when I try to ping an external ip the rep...

Resolved! Existing ASA5512-X upgrade to IPS

Hello all, I have an ASA5512-X that I purchased a year ago and this month I purchased the IPS license. I have two questions: 1. Do I need to re-image the entire ASA (after performing a backup) or can I just TFTP the IPS software to the box and proce...

Cisco ASA 5585-X SSP10 vs SSP20

Can anyone confirm that when deploying the 5585-X SSP10 that there is a cost to license the 10G ports? It seems there is like a 20-25k price difference between the two and I don't need the big throughput like the SSP20 has, I just have the need for 1...