I have read a few posts regarding shunning already. I just don't feel like the ASA is shunning as much as I'd like it to. In fact - it doesn't ever seem to shun anything unless I manually add it.Running 8.3(2)13My config looks like this:Result of t...
I'm working on network with around a dozen (and growing) remote sites that are all connected to a central site via L2L VPN using ASAs. The remote sites send all traffic (internal and external) through their VPN connection to the central site and Inte...
Hi; How can I configure the PAT on my 5512 to allow smtp traffic coming from the internet? I have one public ip only, but I need direct the smtp, http traffic to two different server internal.
Hello Friends,I am New to ASA world and need your help.I was working on a issue were we found that thier is one particular static route entry in ASA routing table.We checked the running-configuration but did not find any entry in running-config for t...
This is what I am trying to add... object network voice-sip-tcp host 192.168.1.65 nat (inside,outside) static interface service tcp sip sip^^^ this was succesful!object network voice_sip_udp host 192.168.1.65 nat (inside,outside) static interface ser...
Hi ThereI'm busy converting juniper to Cisco line by line I've used the Cisco tool but had some errors that I'm now fixing manually. how do I convert the Juniper application layer gateway to a Cisco ASA format, see below.The (set policy id 663 applic...
Hi, There are 2 things I would like to ask. 1st - my understanding of PAT ( port address translation ) if I have 1 public IP address lets say 1.1.1.1 for example and have 3 internal servers 192.168.1.1 .2 and .3 can I use the same public IP to map di...
Hi,we have one internet link which is terminated on Internet router cisco 2921. connection as belowInternet router==>Cisco ASA 5512X===>cisco 3560 L3 switch (Vlan Created on switch & Gateway for server 10.120.8.1))====> Proxy server with single LAN c...
I have an MPLS router on the same LAN subnet as my ASA which is also my default gateway. I have a couple remote subnets that are reachable via the MPLS. On the other side of the MPLS I have an identical environment with ASA as default gateway.I hav...
I recently upgraded Java to JRE version 1.7.0 and now when I try to login to the ASA 5510, I get the following message in the java console log.Exception in thread "AWT-EventQueue-0" java.lang.ClassCastException: sun.security.ssl.X509TrustManagerlmpl ...
Apologies for the naive question but is it possible to load FirePower Services on an (ASA5585-)SSP-IPS20 hardware module? Or is a new hardware module required? Thanks,
I am fairly familiar with ASA 8.4+ NAT rules but was wondering what is considered the best practise when an ASA is an Internet edge device that is doing NAT/PAT for Internet access as well as Site-to-Site VPN with RFC1918 addressing on either side of...
I am trying to convert a Juniper to Cisco config, I've used the online tool however I got a lot of errors showing the line that the tool could not convert. I'm working on the below at the moment. is there a way to configure the UUID on an ASA or how ...
