Network Security

Resolved! Static and dynamic nat together

Hello, let me ask you if it is possible..I have the following right now :nat (dmz,ext) source static obj-192.168.15.87 obj-172.31.22.55 destination static obj-172.20.22.0..so network 172.20.22.0/24 can connect to 192.168.15.87 through nat 172.31.22.5...

Resolved! Help with NAT going from 5520 8.2 to new 5512 9.1

I have a bunch is NAT rules I have to convert for ASA 5520 version 8.2(5) upgrading to ASA5512 version 9.1(1)I have taken a few lines of config and put them here. If someone can show me the before and after that would help me greatly. I will use that...

The banner does not appear when the ASA firewall 5510 is accessed through a SSH

Hi , I configure the banner on my firewall but when i access my firewall through ssh it is not working. Please suggest the solution. Thanks & Regards,Madhuraj

[Cisco Security Manager][4.6] Error " Failed to generate valid history raw for future processing"

Hello,The version of CSM is 4.6. The question is about an error message encountered while trying to launch a preview configuration on a Cisco ASA device. The error was "Failed to generate valid history raw for future processing The following command ...

ASA 5510 PASSWORD POLICY NOT CONFIGURED

Hi All , Have a great day to all!!! I have to configure the password policy on my cisco asa 5510 firewall But when I am trying to configure it I am not able to configure it .the configuration command is not supported.Please suggest that it is IOS iss...

cisco asa 5510 firewall Banner is not working .

Hi All , I am Felling problem when i am configuring the banner on my firewall.When I connect to my firewall through console the banner is not coming .As we know the banner should come first in console connection then it should prompt for username and...

Access Cisco Management IP from Separate VLAN

I'm confused as to why I can't access the management address for my ASA from a separate VLAN.I have configured a specific management vlan as 10.10.190.0/24.I have a user vlan: 10.10.190.0/24. The security levels are the same. When my laptop is connec...

Resolved! Cisco ASA 5515-X IPS Edition

What exactly is the IPS edition of the ASA5515-X? is it the firewall edition + x year(s) of IPS security license bundle?Also, i'd want ASA5515-SSD120-K9 if i want the ASA5515-X + IPS/AVC/WSE (will be getting ASA5512-AWI3Y and smartnet) and i should...

Resolved! Cisco ASA non zero downtime upgrade

Hello,with a NON zero downtime procedure upgrade all connections are lost, even nat and arp table ? here, http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/ha_overview.html#wp1078922, on Table 61-2 State In...

Defense Center and Managed host on a separate Network

Hello,May I know if any thing else is required apart from below, if DC MGMT and the sensor appliance management are on a separate network separated by a firewall.443 (inbound) and 8305 (inbound and outbound)Regards,Akhtar

Resolved! DMZ setup. Net from inside?

Hi, I was trying to configure a DMZ on our firewall for a webserver.Our topology is ... Internet > Router 3925 > ASA5525 > Switch(inside LAN)I have an interface on the ASA connected to the DMZ switch. ASA5525 > DMZ switch > Web server. The ACEs for...

How o submit patches

I've created a couple of patches for the Host Input API and the Tenable SecurityCenter Input Plugin that I would like to contribute back to trunk. What is the process for submitting the patches? Thanks! --Matt

FTP ERROR ASA CISCO

Hi Am getting below error while am try to copy image from ftp server. aaaaaa# copy flash:flash:/asa821-k8.bin ftpSource filename [/flash:/asa821-k8.bin]? asa821-k8.binAddress or name of remote host []? xxxxxxDestination filename [asa821-k8.bin]?Writi...

Resolved! Multiple SSH listening ports on Catalyst switches

Hi community, On Cisco Routers you have the option to configure multiple SSH ports (instead of the default tcp 22) in combination with rotary groups. Then, attach these rotary groups to specific VTY lines.This works just fine. But, it seems on Cisco ...

Resolved! Question regarding ASA 5515-X failover and VPN licensing

Hello,our company is currently in the process of buying a new firewall and the ASA 5515-X seems like a good choice for us, but I have two questions regarding it. 1. Do you have to buy a separate license for using a failover configuration or is one al...

Network Security

Forum Posts

Resolved! Static and dynamic nat together

Resolved! Help with NAT going from 5520 8.2 to new 5512 9.1

The banner does not appear when the ASA firewall 5510 is accessed through a SSH

[Cisco Security Manager][4.6] Error " Failed to generate valid history raw for future processing"

ASA 5510 PASSWORD POLICY NOT CONFIGURED

cisco asa 5510 firewall Banner is not working .

Access Cisco Management IP from Separate VLAN

Resolved! Cisco ASA 5515-X IPS Edition

Resolved! Cisco ASA non zero downtime upgrade

Defense Center and Managed host on a separate Network

Resolved! DMZ setup. Net from inside?

How o submit patches

FTP ERROR ASA CISCO

Resolved! Multiple SSH listening ports on Catalyst switches

Resolved! Question regarding ASA 5515-X failover and VPN licensing

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Palo Alto to Cisco Migration Tool count_summary error

cdo integration with Azure ad MFA

FMC and multiple AD domains

Dynamic Split Tunnelling - Android Devices

compartilhar internet com VLANS firepower asa

What happens to an L7 ACP rule when IPS option is not enabled.

Delete config on ASA 5510

IPS traffic report

Accessing remote ASA over site-to-site VPN

SLA failure because certain IP addresses cannot be reached by ping