Network Security

Hi experts,In the Customer-Class configuration, we put “limit-resource Conns 50000”, thus each context should limit the maximum concurrent table under 50000. However, when we see the “sh resource usage”, the limit is showing “49000” not “50000” and w...

Can any one help me out how to resolve this issue. ASA 8.4 versioninside to TEST working fine.nat (inside,TEST) source dynamic  interface my main concern is TEST (192.168.2.1) lan wants to access inside subnets with real ip addresses (ex: 11.11.11.1)...

Hi, I am doing an active/standby failover configuration and I would like to have the virtual mac addresses configured.I'm wondering if I need to do them both on the primary unit and the secondary unit, or just the primary unit. The inside, outside an...

Hi All,I'm newbie on the firewall policy configuration. As far as I know, the policy configuration always need to allow both ways. Exm allows services Port1 --> Port2, Port2 --> Port1 in order for both to communication. I've noticed the policy on the...

Hi all, we have two asa 5510 in Active/Standby fail over mode with AIP-SSM modules. We have urgent requirement to reset AIP-SSM module. Is it possible to do this without triggering fail over on asa. Somewhere its mentioned that its possible by removi...

Hi, Could you please explain me the complete Cisco ASA Firewall working process? What are the steps involved? Regards,Jermy Franklin A

helow guys ,i have many problem with ASA5505 version 91- I save factory default configuration  (write memory )after command " config factory default " but when i make reload i found no configuration saved . my question from where i know the device bo...

Hi,I have a network segmented out into two pieces.Inside nic has a bunch of servers, one of which is a Wins server and ethernet1 has a segmented network which should have basically no access to the inside nic. I did not want to stand up another WINS ...

Hi,I'm trying to add a pair of ASA in HA (Active - Standby) in PRSM Server Multimode Device Mode. I'm getting the error that appears in the title:"Error ASA CX import configuration - Unauthorized request Version ASA: 9.1.3ASA CX: 9.2.1.1 (48)ASA PRSM...

Hello,I could really use some help in setting up a port forward rule on my ASA. I have a host on the LAN (192.168.1.24) I need to expose ports 8082 and 8083 (both tcp and udp) to the Internet. I have an existing rule set up for another host on the LA...

I have a TAC case open. After first "misplacing" my ticket last week they have been of very little help.ASA 5585 SW Version 9.1(4)CX Modules SW Version 9.2.1.2(77)PRSM SW Version 9.2.1.2(77)The mgmt-plane trace log from PRSM seems to have relevant in...

after upgrading ios Cisco Catalyst 6500 Series Supervisor Engine 2T to the latest release the ASA-SM module is not recognized it is disabled. the FPDis not recognized any more.  reverted back to previous ios with no luck