Network Security

Resolved! ASA Cluster site-to-site VPN

Hi,I have 2 ASA firewalls in 2 DCs and I want to upgrade them to cluster the 4 firewalls into 1 logical firewall.My question is about site-to-site VPN.1- The master will handle the site-to-site VPNs, but if the master firewalls fails, then a new mas...

Resolved! SSH Access On Specific IP

Hi,I have configured 10 interface vlan on my cisco core switch 6509.However I want my users SSH it on management IP only. SSH access on other IP (defined for each interface vlan) should be blocked by switch.Kindly suggest how to configure this.Thanks...

ASA Natting over VPN loses connection to management

All,I have an ASA that I downgraded from 9.1(4) to 9.0(3) for the problem I'm about to describe, and it didn't fix it. Here's the deal: I need to nat over a vpn tunnel. The tunnel works fine, but I cannot ping to/from my internal interface. The nat r...

ASA 5510 unknown subnet trying to ping inside

I have an ASA 5510 8.4(5) in one of my remote offices. it's got a tunnel back to my main site.the past 2 nights it crashed around 3:00 am and you couldn't do anything but power it off and back on again.I noticed it was externally pingable, so I turn...

Cannot access ASDM

I have an ASA5505. I was in on ASDM and working fine. I added a new user and seem to locked myself out of ASDM. Not with I try to access it I get"Identification required. Please select certificate to be used for authentication"The list of certific...

Resolved! ASA NAT when not on interface network

We are trying to restructure our edge network. The ASA with NATs is currently on a natural /24, as is its upstream router. We are trying to change the ASA and router to reside on a /28 that is part of the existing /24. In so doing we have added ro...

Ciclic Web Login Page doing Ext Web Auth in ISE Server

Hi,I have a problem trying to make external web authentication with an ISE server. I am using the following devices and scenary.Foreign-Anchor WLC Scenary:1 WLC 5500 as a Foreign1 WLC 5500 as an Anchor1 Asa 55051 Internet Cisco Router1 ISE as a Ext ...

two firewall with same security level

Cisco ASA 5512-x FTP : 425 no data connection

Hello,I am looking for help regarding to FTP connection to external FTP server. Client computer is located behind Cisco Firewall and FTP resides in ISP server. So the problem is connecting from our internal network to external networks FTP server.I c...

Resolved! DNS not working whenever crypto map is applied to interface

Hi guys, I don't understand why the ASA is not able to resolve names whenever I apply following command:crypto map [map_name] interface outsideWithout above command the ASA will be able to resolve names immediately without issue. Without command abov...

Best way to reload an asa config?

Hello,I've been thinking of 2 scenarios that could happen and I woud like to be ready. If a config error was made on our ASA (we have 2 in active/standby mode) what is the best way to recover assuming we have a tftp backup or local flash copy? I kn...

Resolved! Cisco ASA 5512

Hi Guys, I have a basic setup. I have a cisco ASA5512 Gig0 is connected to the internetGig1 is the 'inside' network which has an ip of 192.168.35.254 this plug into our switch on the LANwe do not have an management interface setup.My questions is doe...

Problem web from the LAN Cisco ASA 5515-X 8.6

There is a situation I have a 5515-x handle with version 8.6 and a theme dns when users navigate your website dns resolves public addresses when making this internal users obvimente not reach the site, but from the internet no problem, the dns turn i...

ASA Firewall VPN Client Error

Dear Techies,Following messages are generating on ASA and when it starts generating our VPN client (remote users) failed to pass thourgh IKE phase and VPN client get a message "VPN CLIENT ERROR".We clear all vpn session and also reapply cryto map for...

Resolved! Cisco ASA security level and explicit deny ACL

Hi allquick question: -what is the point having cisco ASA interfaces on diffierent security levels when you have an explicit deny ACL?I have configured my ASA with all interfaces (inside, outside and DMZ) on same security level (100) and some ACLs to...

Network Security

Forum Posts

Resolved! ASA Cluster site-to-site VPN

Resolved! SSH Access On Specific IP

ASA Natting over VPN loses connection to management

ASA 5510 unknown subnet trying to ping inside

Cannot access ASDM

Resolved! ASA NAT when not on interface network

Ciclic Web Login Page doing Ext Web Auth in ISE Server

two firewall with same security level

Cisco ASA 5512-x FTP : 425 no data connection

Resolved! DNS not working whenever crypto map is applied to interface

Best way to reload an asa config?

Resolved! Cisco ASA 5512

Problem web from the LAN Cisco ASA 5515-X 8.6

ASA Firewall VPN Client Error

Resolved! Cisco ASA security level and explicit deny ACL

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

KDC has no support for encryption type on ASA 9.18(4)22

Define a privilege command for show ipv6 access-list

Daylight Saving setting

Deployment of HCL 'BigFix' to Cisco FMC virtual server

[HOWTO] - Using CDO Secure Device Connector with a Proxy

Cisco FMC strong encryption license code

Cisco FMC 1000 Last Date of Support July 31, 2024

Upgrading replacing ftds with ftds: FTDs are managed by FMC

How to Allow Internet Traffic

Elephant flow remediation options for FTD 2110