With an ASA is there a way for it to allow scp(port 22) traffic from a host to another host but deny ssh(port 22)? Obviously this an encrypted protocol but I do not know if there is some difference between the two that can be matched.
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(85) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,521) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(140) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(4) -
Cisco Secure Firewall Management Center (FMC)
(19) -
Cisco Secure Firewall Threat Defense (FTD)
(30) -
Cisco Security Cloud Control
(2) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,569) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(320) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,555) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,772) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(626) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Resolved! NAT behind an Internet router
hi,i've plan to get an internet edge 2911 router that routes public ip space between 2x internal ASAs.one asa is a regular 5510 ver 8.2 and the other is our new context-based 5525-x ver 8.6.my question is, who does NAT here is it the ASA or router (w...
It’s observed that – Phones are not coming up on network when 802.1x is enabled on port. After troubleshooting it’s noted that Port-Security restricts phones not to operate either in Data or Voice Vlans. Problem gets resolved by disabling port-securi...
Hi,I need the VPN client IP pool to be able to access one of the server in the LAN.The IP pool is 172.19.100.101~105 but the server is different range 172.59.1.10.From the below config, is there any configuration that i need to add or delete to be ab...
Resolved! How to see ACL traffic is allowed on.
ASA on 8.4 code.I see traffic of interest allowed across the FW but not on the ACL I expected (that ACL has 0 hits). How can I see the exact rule my specific traffic is allowed on? e
can you give me a basic cli configuration in asa 5512x and also how to install the licence
I am going to install ASA5525-X Firewall in HA mode and both have Software IPS modules and I was wondering how the management IP address will be configured in HA mode. Is both IPS will have same management IP address?I looking for some sample config ...
I was able to access the ASDM launcher in the browser yesterday via https://192.168.111.1/admin and I was stuck there as the browser version says that my ASA image does not work with my ASDM version... So i tried some trouble shooting and t...
Hi everyone,I am very new to configuring the ASA particulary after the change to how NAT is implemented. What I am trying to accomplish logically seems fairly simple, yet I cannot get it to work. I have a Synology NAS at home that I am trying to re...
Tengo un ap 3500 con acceso por controladora y lo necesito configurar autonomo, me han dicho que se puede hacer cambiando la version del firewall, si es asi por favor me pueden informar ¿donde lo puedo descargar? o si me pueden dar otra solución.
Resolved! asa 5520 nat problem
Hi I have an Cisco Asa 5520 and i want to make vpn site to site using another interface with a lan to lan carrier, the problem is when i try to pass traffic have the follow syslog error:No translation group found for udp src lan2lan:10.5.50.63/44437...
Hi Community, all helpful responses rated! We have some Cisco ASA5550's running code release 7.2.4. We are planning on upgrading these to 8.0 -> 8.2 -> 8.4 -> 9.0.3, step upgrade as proscribed by Cisco. Now due to the nat-control and NAT syntax chang...
Hi I have on firewall in a different LAN segment and I want to access that firewall through asdm however I am sitting in outside zone for that particular firewall.
Resolved! Cisco pix501 enable telnet
Hello What aré the cli commands to enable telnet Conection in a pix501, can you help me?? Thanks Anna.
Hi Everyone,When ASA is in Active/standby failover i can ssh to standby ASA using Radius.But when ASA is in multi context mode Active/Active failover i can not do Radius Auth to standby ASA?Is this default behaviour?RegardsMAhesh
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
Top Solution Authors
| User | Count |
|---|---|
| 8 | |
| 7 | |
| 7 | |
| 1 | |
| 1 |
