Hi all,we have installed new MS root CA and issuing CA (Windows Server 2008 R2 Enterprise) . When I tried to get CA certificate from some Cisco devices Cisco WS-C3560-24PS it fail.Debug: QL-SW3(config)#CRYPTO CA authenticate ESSAUDE ...
Somebody knows if is possible to successfully pass traffic through an interface bridge between a FWSM and the MSFC using an external IPS Solution as inline physical interfaces?In theory should work just like vlan bridging in the connection through an...
Hi, I'm stuck, here is what i need:host1: 192.168.1.1 service tcp/443>>>>> public ip 1.1.1.1 service tcp/443host1: 192.168.1.1 service tcp/80>>>>> public ip 1.1.1.1 service tcp/80host2: 192.168.1.2 service tcp/22 >>>>> public ip 1.1.1.1 service tcp/2...
Hi,I have gotten a rather unusual request and wondering has anybody come across it before and if it is technically feasible? We have a Cisco ASA Firewall that terminates remote access clients using an anyconnect ssl vpn on the outside interface.Ther...
Hi everyone,I have a problem configuring a cisco ASA 5510 - 8.4 :I have attached a picture of the network :Could you help me with the configuration needed to have the host within the DMZ subnet talk to the PI server and vice versa.at the moment I can...
LAN traffic is going through the ASA5512 fine, onto a single switch and then to servers.We are trying to NAT some internet IPs to VLANs, and the connections are timing out. The connection is built as below but the only packets captured on the vlan-10...
Shouldnt this acl permit tftp from host 10.0.0.68, but deny any other tftp request? and also permit any other request other then tftp?access-list 100 permit udp host 10.0.0.68 eq tftp host 10.0.0.82 eq tftpaccess-list 100 deny udp any eq tftp any eq ...
Hi, I have a Desktop with ip:10.10.3.4 in my network. In this PC internet working. when i try to add the NAT command in Cisco ASA 5510 - in this scenario 10.10.3.4 to some public ip X.X.X.X (one to one natting)static (inside,outside) X.X.X.X 10.10....
I'm about to configure maximum and per-client embrionic connections to guard against a syn-flood attack.My question is, are there any normal circumstances which create embrionic connections or are they always a result of malicious activity?I'm trying...
Hi all.... hoping an easy answer to this one. I have seen a few views that don't help me. I have just migrated a Watchguard X seres to an Asa 5510. I have a 2811 in front of it to handle the Bgp peering previously handled by the WG. All is well. ...
I have a 4255 with 3 interfaces that connect to a 6500 series switch. The IPS interfaces are set to promiscuous mode with a defualt vlan specified. On the switch side, I would like to send the traffic from more than one vlan to the sensor GE interfac...
Hi, I have an active/standby ASA with both fitted SSM-10. We are planning to do a software upgrade for the SSM-10. My concern here is the proper steps.Should we start upgrade with the secondary unit first before we perform the upgrade for the Primary...
I have a 4255 IPS appliance, and this device has 5 GE interfaces. I am trying to find the mac addresses for all these interfaces. The "sho int" at the CLI doesn't show it, nor do they appear in IME. Where can I see them?
Hello All, I am currently having an issue where two directly connected networks on an ASA are unable to communicate. ASA Ethernet 1 - 172.10.0.1 255.255.255.0 - Security level 100ASA Ethernet 2 - 10.10.0.1 255.255.0.0 - Security level 50Switch 1 - 17...
