Network Security

Resolved! Nat two identical services on interface Public Address

Hi all,can i nat two internal address with same services on one public interface address?I have an ASA 5515-X and i want to nat two services, tcp\80, on same ip public interface address:object network Owa-Interno host 10.0.1.4object network Sito-Inte...

Resolved! Can't connect inside host

I recently installed a Cisco router between my ISP and my PIX 501. Now I am unable to connect to inside servers. I think the problem is my static NAT entries on the PIX. Can anybody help me out? Thank you!-Bk

Problem with DNS resolution - appears to be issue with ASA

I have a customer with an ASA-5505 running 8.2(5). There is an internal domain, and the DCs are using local ISP and public DNS forwarders. About a week ago, users started to drop their Internet connection because of name resolution problems. What I'v...

ASA SSL VPN Licensing with Active/Standby failover

Regarding the "duplication" of SSL VPN licenses required for two ASA's in active/standby (i.e. both devices must be the same for active/standby to operate)...I know this question has been asked several times, with the answer being "Yes - both applian...

Resolved! ACL syntax problem

I have a ASA services modules in a 6509-E that is giving me issues with ragards to ACL syntaxLet's say I have a KMS server at 192.168.20.10I want to allow all hosts to reach this server at port tcp 1688so I do object-group network KMS-SERVERS host 19...

Locating un-used NAT statements?

Hello,I've removed many ACLs that have zero hits against them for that last 8 weeks, but how can I do a similar thing with NAT as we have so many NAT statements, I think there is a CLI command I can use but can't remember it?Thanks

Resolved! ASA Failover Deployment

Hi Everyone,We ordered two asa5515x that will be deployed in active-active configuration. I've gone through several pages of some example configuration and deployment options but i cant find what im looking for. In our current operation, we have on...

Resolved! ASA5505 on external DHCP with PAT for internal www and smtp servers

Hi all,I've been working on my ASA5505 quite happly with the old version of 8.2... for my 642-618 exam, but then it came to having a look at the 'upgrade' and I'm now running 9.1(3).....Since it's 'only' at home I took the time to rearrange the home ...

site to site VPN peer ip address for failover

Hi,while creating site to site VPN/IPSec Tunnel on cisco ASA, can we put two peer ip address, one will be primary & other ip wiil be secondary when primary ip will not rechable.

Resolved! Meaning print screen

Hi, May i know the meaniung of 3 print screen below...1. Why no VLAN at ASA FIREWALL ?? How to create via ASDM...2. TO enter CISCO Anyconnect.........3. TO access ASDM....

Internet Link aggregation

Hi,We have Three ISP Link (20 Mbps each) at HO Location & respectively connected on three seperate Internet Router below them connected to three Cisco ASA. we have published many application like web, SAP, mail on these links.Also we have IPSec VPN c...

ZBF Firewall Config Questions

So I am working on a CBAC to ZBF conversion and am running into a couple of questions. When converting to a ZBF, does the need for ACL's on the interface go away? I have the following configuration and can't seem to get any stats genrerated when I do...

Access to internal servers using public IP address

I have an ASA5540 on 8.2(5) and I am setting up a Guest Wireless network that is on the same interface as our corporate user network, but is completely segregated and uses Google Public DNS (8.8.8.8). I have this all set up, but the only thing I can'...

One internal two external interfaces ASA5512

HiI have an ASA5512 and need to spilt traffic off a voice vlan to exit via two external interfaces (one traffic is voice and one is voice application). So I have one internal interface and two external interfaces. From the LAN I can ping the next hop...

need to convert pix 501 config to asa5505

I have to convert our pix 501 config to asa5505 - i used the cisco convert tool but got stuck on a few rules that did not convert. Any help would be appreciated.partial config ..ip address outside 172.100.1.1 255.255.255.0ip address inside...

Network Security

Forum Posts

Resolved! Nat two identical services on interface Public Address

Resolved! Can't connect inside host

Problem with DNS resolution - appears to be issue with ASA

ASA SSL VPN Licensing with Active/Standby failover

Resolved! ACL syntax problem

Locating un-used NAT statements?

Resolved! ASA Failover Deployment

Resolved! ASA5505 on external DHCP with PAT for internal www and smtp servers

site to site VPN peer ip address for failover

Resolved! Meaning print screen

Internet Link aggregation

ZBF Firewall Config Questions

Access to internal servers using public IP address

One internal two external interfaces ASA5512

need to convert pix 501 config to asa5505

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

FMC HA Backup

FTD1150 with no traffic, Snort is using 95% CPU

FTD 9300 Connection Rate OID

Unable to erase disk0 on ASA from ROMMON

Set up FMC on Azure

ASA-- Any special config needed for this (simple?) connectivity?

Cisco Firewall Firepower 1010 update error

FTD - IPSec failed

deploy error message "policy has been altered since, retry deployment"

Old NAT ASA Config Question