If I want logging for the "internet" facing context on an ASA, do I have to configure logging on that context, or will the logging on the admin or system context also send logs for the other context?
I received a recent warning message while updating my IPS sensor to the latest IPS signature 797, WARNING: MultiString - second stage table generation has also resulted in a table split Has anyone got an answer for this ?
Hi I have a test mail server I want to access from the internet and I'm trying to configure nat I just have 2 vlans inside and outside and I want to use the ip address of the outside interface but the asdm config is confusing please see attached imag...
What are the conditions for this event to trigger ? does it trigger even if there is one packet without any of the flags syn, ack,fin,rst or if there are 10 in 50 packets without the flags set ?
Hi , In our environment having ASA 5545 ( IOS Ver 9.1) Firewall and In there AES 256 CBC cipher encryption is enabled for SSH user access.we need to disable CBC cipher encryption and enable the CTR Cipher encryption for SSH users.Kindly help me fo...
Dear AllI have an ips module (ASA5585-SSP-IPS20) in promiscous mode which shows Sensor health missed packet critical sometimes and sometimes shows needs attention.All other parameters are normal in sensor health.This ips is connected to Serverfarm f...
Hello i upgraded my ASA 5510 with OS 8.2 fail over pair a month back to new ASA 5512 with OS 9.1. Almost all services seems working fine except the authentication of the device itself. My primary node is able to be authentocated via ACS and even the ...
Hi All,I have a Cisco ASA 5510 and would like to setup a NAT rule for one server but only for traffic that matches a destination with a specific IP and Port. Is this possible? The reason I ask is because I have one application that requires a connect...
Hi guys, I am implementing IPv6 on a lab environment. My ASA is running 8.2(5). I am mapping the outside IP address 66.181.12.242 to 192.168.22.101 with the following command:static (inside,outside) 66.181.12.242 192.168.22.101 netmask 255.255.255....
HiI have tried to allow traceroute for one PC for the testing purpose, but it is not workingModel : ASA 5515x Version : 9.12 And also allowed below access list, but still user getting * * * access-list acl_out line 1 permit icmp any any echo-replyacc...
Hello All:I am in the process of cleaning up an ASA 5510 that I have inherited and have a question about applying a new ACL to an interface that is working correctly now with another ACL. The main purpose is I want to change the name of the ACL an cl...
folksi have an asa 5540 running 8.4 (6) which i use for ssl vpn to its outside interfacethe appliance has started dropping existing vpn sessions and refusing new connectionswhen i try to telnet to its outside interface its not listening on tcp 443if ...
I am using code level 8.2.5 global (dmz) 1 interfaceglobal (outside) 1 interfacenat (dmz) 0 access-list NONAT1nat (inside) 0 access-list nonatstatic (inside,dmz) 10.42.198.176 172.22.196.2 netmask 255.255.255.255 This is in reference to the bold nat ...
Hi,I have completed the Certificate Request from the ASA ASDM GUI and forgot to save before closing (Saved only from command line) which apparently does not save what has been done from the ASDM. Now I have received the certificate from the CA but ha...
