I have attached to files to this post (packettracer.txt and test-config.txt) Im working with the X series of Cisco firewall and there is one basic thing that I dont understand. (this might be a stupid question). If one interface is security level 90 ...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(84) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,510) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(139) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Management Center (FMC)
(3) -
Cisco Secure Firewall Threat Defense (FTD)
(2) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,567) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(319) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,553) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,769) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(624) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hi,I have a problem. Sometimes it happen, when PC was authenticated by dot1x, it is invoked after some time event "Detected Host Lookup UseCase (Service-Type = Call Check (10))" and then falls to MAB. After calling this event the AD station logs usin...
Resolved! Need help - Cisco ASA with FirePOWER
hi currently we are using asa 5510 without firepower feature. our aim is to publish web servers and microsoft lync with reverse proxy method. control internet traffic , apply particular extensions file not to download , bandwidth management etc. Is ...
Resolved! CSM service CRMDmgtd is not starting
I have install CSM 4.7 on window server 2012 r2. But its deamon services (CRMDmgtd) are not starting.What would be the issue. Pinging to server working fine. Thanks
Greetings, I am trying to find what is the default actions of the TCP normalizer in the ASA 5555x (9.1(3)). I can see in packet captures that the ASA is stripping some option flags (SACK) and I am also wondering if it is dropping none conforming pa...
Resolved! Moving Switch ACL to ASA Firewall ACL
So I have a Cisco 6509 with an outbound ACL on an interface that faces a Cisco ASA 5580 firewall. I have converted this Switch ACL into the format that the ASA will recognize and applied it in the inbound direction of the ASA facing the 6509. The o...
this is like a test network, i have it on the most basic settings i can as i am learning. i have a asa 5512 device. I used the wizard for the initial setup pre 8.3 and was able to get it to work on my other ASA device. But i see alot of things chang...
sir how to block mac addresses in cisco 2800 router
hi all,i created a static NAT (and inbound ACL to allow only HTTPS) for one of our riverbed to be accessed from the internet.pings are ok but can't seem to get the public IP accessible.packet tracer passed on both direction.any ideas?inside: 172.27.1...
Hi guys,Maybe someone can explain me something from "sh ver" commandBasically we have ASA cluster - two nodes and if I issue "sh version" of both of them I have slightly different outputGood oneHardware: ASA5512, 4096 MB RAM, CPU Clarkdale 2792 MHz...
We have a requirement that we monitor a non-routable network at a remote location. The FW is operational for all other functions I am adding the items listed be low Here is the config items on the FW 5505 with base license. interface Vlan1 nameif ins...
Hi Please find attached my running config and system log Request urgent help to correct any configuration errors The ASA 5505 is behind ISP Cisco router 888ISP router external address - 202.62.x.xISP internal address - 100.10.10.254 Is route (outside...
I got new asa 5512 with ver 9.1 on it and I am trying to do a static nat, but it did not work. here is my config: object network hst-192.168.0.60 host 192.168.0.60 nat (inside,outside) static 173.x.x.xobject-group service svcgrp-192.168.0.60-tcp tcp ...
Perform Cisco ISE integration with Active Directory, which is trusting relationship with another AD.The user that used to established the connection has full permissions only on a domain controller and the other read-only.The authentication of wirele...
I have new internet connection line and i want to connect it with the primary internet connection through ASA 5510 ver 9.1Kindly i need ideasthe first line is working fine and want to implement the second line for load sharing purpose Regards
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
