Network Security

Use DMZ interface on ASA to serve remote VPN?

Hi, I am wondering if this is do-able. I have a ASA with 4 interfaces: Internet, DMZ, Guest and Internal with security level increased by 20 for each one. From Internet, our VPN URL(vpn.abc.com) is resolved to be Internet interface address. From Gues...

ASA 5505 v9.1 - etherchannel

Hello,I have a firewall ASA 5505 version 9.1(4) and I don't know if I can create an etherchannel with this device. I found this :EtherChannel support8.4(1)You can configure up to 48 802.3ad EtherChannels of eight active interfaces each.We introduced ...

CDA: Unintended users appear in the user-to-IP mapping table

A customer of mine is using ASA CX together with CDA to extract the user-to-IP address mappings. The interaction between CX and CDA is configured and works properly, yet the policies will sometimes not work as intended. We then figured out that CDA w...

ACS 5.4 with ACS 5.6 as a Log Collector

Hello, I have a ACS 5.4.0.46-6 running.Now I want to setup a ACS log collector on my ESX 5.5.Since ACS 5.4 is not supported on ESX 5.5 I want to install ACS 5.6. Question :I this setup possible?Can I use the ACS 5.6 as a log-collector for the ACS 5.4...

Cisco ASA 5510 // Enable SSH // Unable to configure service

Hello, I have an issue with enabling the ssh functionality on the outgoing interface called "internet". ciscoasa(config)# ssh 10.1.1.0 255.255.255.0 internetERROR: Unable to configure service on port 22, on interface 'internet'. This port is currentl...

Resolved! Device Manager image set, but not a valid image file

I am trying to update the ASDM on an ASA 5510. The version on there now (5.8.0) doesn't seem to like Java 7. When I try to set a new image:(config#) asdm image disk0:/asdm671.binDevice Manager image set, but not a valid image file disk0:/asdm671.bi...

FWSM boot failure

Dear Sirs,Please, help me in solving the following problem. I have 7604 router with FWSM module in module 3.First of all the FWSM CF has been damaged, not physically. I bought the new same compact flash (size, partnumber, etc.). Downloaded the softwa...

ASA crash with OSPFv3 in startup config?

Hi... My ASA 5505 at home running 9.2(1) is having some strange issues running OSPFv3. I've configured OSPFv3 and everything is happy happy, but then I reloaded the device for some other reason , and now it keeps crashing on boot up, restarts and the...

ASA 5520 Dual Active ISPs

I currently have 1 ISP (Verizon) coming in over bonded T1s. This ISP has NAT pointing to my critical servers that have clients coming in to connect to them via port 8421 and 3024. We are looking to bring in another ISP. I know that my 5520 can do ...

Configuring Sourcefire Access Rules

I've got an ASA 5525-X with the SourceFire module that will be replacing a 5510. I've got the firewall ACLs from my existing ASA transferred to the new 5525-X and now I'm working on the initial configuration of the Sourcefire module. I've watched a d...

Comparison between ASA and FortiGate

Hi All,I have a customer using an ASA 5550 and recently considering migrating to a FortiGate 620BThe main reason is because it can run as a Firewall, web filtering, anti-spam, anti-virus, IPS and has 20 accelerated ports to avoid any degradation in p...

cisco csc-ssm active directory integration

Hello, Can any 1 help to me cisco csc-ssm active directory integration with step by step guide. thanks

Beginner to config ASA-5515-X , please help ^^

Hi,I have a new ASA 5515-x.Have a PC connected to the management port. I have network access to it, can tftp up files and ping the firewall.When I try to access it by https://192.168.1.1 or https://192.168.1.1 I get "webpage could not be found".PC co...

Cisco ISR Firewall/CSM Management Question...

Wasn't sure if this should be posted in the "Security" section or "Network Infrastructure" section. Anyway here we go: We currently use Cisco Security Manager (CSM) to manage 36 pairs of ASA's and ASA-X's in field offices around our province. We have...