Hi Allwe have implemented 2 5525x ASA's running active/standbydo we have to manage the IPS Seperately or does it sync from the primary firewall ?also do I need to licence the IPS devices seperately also ? cheers
Is it possible to change this port from https (TCP 443) to something else? I.e TCP 444 (Don't ask why, paranoid client).Also I will be managing 2x CX modules with PRSM so can that handle management on a non standard port? Regards,Pete
Hardware: WS-SVC-ASA-SM1Software: 9.1.(2)Show memory output:system: Used memory 30%context admin: Used memory 99%context mpls: Used memory 6%context bnl-extra: Used memory 4%context bnl-intra: Used memory 0%These ASA-SM are in Failover A/S.The conte...
Hello,help me pls, i get stuck, when i connect to ASA (9.1.2) over ssh and logged under username "test" i can access priviledge 15 level??!!!The same configuration on the another ASA (8.4) works ok.How to limit that user only vpn access? Here is conf...
Help Please :)We have an ASA 5520 that we have installed a new certificate. The company was purchased and we are removing all references to old company domain name. We deleted the Trustpoint and have attempted to set new trustpoint for enrollment???S...
Hi,I'm using SSLVPN within a Microsoft PKI. If a cert has been issued by the CA and installed on a client device a specific connection profile is forced (via ASDM configuration 'Certificate to AnyConnect and Clientless SSL VPN Connection Profile Map...
Dear TAC,Please see summary for version information. We are requesting on how to export Object Service Group and Object Network Group from ASA. We will then clean-up these files/databases and then load them onto a FWSM1.Thank you in advance,Phil
Hello,I'm working on a basic configuration of a 5510 ASA.inside network of 192.168.23.0 /24outside network 141.0.x.0 /24config is as follows:interface Ethernet0/0 nameif OUTSIDE security-level 0 ip address 141.0.x.0 255.255.255.0!interface Ethernet0/...
hi, i have 5 branch office and 1 head office . i am using 8.6 version in HO and 8.2 version in other branch firewall. a lotof time i found VPN stop decrypt/encrypt packets.then i use packet tracer to allow then vpn start work automatically. please ...
Hi friendsIf telnet traffic passing trough ASA(lets say outside to inside ) should drop if password "password" is used . is there any way we can do it trough MPF, if it let me know the configration
Hi, I am trying to get my ASA 5505 to run IP SLA tests in my network management software. This requires the firewall to support CiscoRTTMonApp. Does this device have a MIB that will support this? Thanks
I'm looking at the recent Cisco Advisory and it indicates moving to 8.4 to fix the issues. What would be the highest code level that I would be able to go to?http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asaTh...
ASA 5585-x10, ver 9.1I have about 10 public subnets that will be used for NAT translation on the ouside interface. These subnets are different from the subnet the outside interface.Is there a way to advertise these routes using OSPF from the ASA? ...
My setup is :PIX 515E, IOS 8.0(4)28, ASDM 6.1(5)57, Firewall mode routed, 6 interfaces, 128Mb.My question is, can ASDM be accessed through any interface on the PIX besides ethernet1? I'd prefer to run ASDM through ethernet5 but it refuses to run. I h...
