Network Security

ASA / DMZ configuration

Hi:I have to allow traffic from my DMZ into my LANI have created the following access list and will apply to DMZ interface:interface Ethernet0/1nameif insidesecurity-level 100ip address 192.168.200.1 255.255.255.0!interface Ethernet0/2nameif dmzsecur...

Why use transparent firewall in data center?

I've seen Cisco documentation recommendation transparent mode for firewall deployment in the data center, e.g. 5585X. I understand the key reasons for this are:- easy "insertion" of firewall in pre-existing network- speed (since there is no "hair-pin...

Very urgent case: DDOS on the outside interface using port80

dear all :i am facing very urgent and critical DDOS on the port 80 on one of our webserversThe Case:•1- Too much traffic from too many different ips around the world asking the webserver on the HTTP(80)port which is opened to any one based on our req...

ASA 5520 7.2 Source & Destination nat

Hi all,Is it possible to NAT source & destination addresses (twice nat) on an ASA5520 running 7.2(5) ?

ASDM and Java

I seem to have all kinds of issues trying to manage my firewalls with ASDM. We have 4 ASA5510 firewalls we manage, three running ASDM 6.4 (3) and one with ASDM 6.3(2) .I am using a Windows 7 VM When I go to the ASDM launcher (1.5(50)) and enter my ...

Help for Cisco Security Manager

Hi All,Please help me how cisco security manger is managing logs from different devices.For example cisco security manager can manage FWSM, ASA, IPS devices.Does it stores logs from this devices into some central location where CSM is being installe...

Cisco ASA Mixed routed and transparent

I have a requirements for the following but not sure if its possiblePPoE on the WAN - picks up an IP from the ISP then private behind - NATed - this is no issues.But the connection also comes with an additional 5 IPs public IPs. Traditionally I woul...

Ask the Expert: Mitigating Network Attacks

With Kureli SankarWelcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn from Cisco expert Kureli Sankar how to identify and mitigate network attacks. Kureli Sankar is an engineer supporting Cisco's firewa...

server broadcast

Hi All,Faced an dos attack from lan inside zone to Dmz zone.AS from firewall logs came to know about the one of the server wasbroadcasting.It took long time to findout that particular server.So is there any tool that gives clear picture in terms of g...

AIP-SSM-20 shunning problem for block host request

I enable signature 2000 for testing for request block connection on ASA. But it isn't work. Device login profile and connection between ASA and AIP-SSM are correct. I see the following error in Event Viewer:evError: eventId=1297944335862322485 vendo...

[ASA 5515-X] After upgrade from 8.6 to 9.1 no ping possible

Hi there,I've got a little problem with my ASA 5515-X after upgrade from version 8.6 to 9.1.I've got two 5515-X in A/S-mode and upgraded both as described on cisco's website (first standby-unit, failover, etc.). Everything worked just fine except pin...

ASA Auto Backup to TFTP Server

Is there a way to have the ASA back up to a TFTP automatically, like daily or weekly?

Resolved! Does 5505 with security plus support context fw

Hi everyone,Currently i have 5505 with base license.Thinking to buy the ASA with security plus license 5505.Need to know does it support context fw?ThanksMAhesh

Resolved! webVPN and active directory

I have a 5515 ASA that has the webVPN configured on it and it is using active directory to authenticate. The client would like to set up groups in active directory and restrict access to those groups when they are connected to the webVPN. For example...

ASA 5510 Block sending Emails from Windows XP, working fine on windows 7 & 8

Hello!!I have cisco ASA 5510 with basic configuration (default policies). The problem is that windows XP users are unable to send emails form MS outlook and unable to log on to Hotmail , Gmail or any mailing site. While windows 7 and 8 users are not ...

Network Security

Forum Posts

ASA / DMZ configuration

Why use transparent firewall in data center?

Very urgent case: DDOS on the outside interface using port80

ASA 5520 7.2 Source & Destination nat

ASDM and Java

Help for Cisco Security Manager

Cisco ASA Mixed routed and transparent

Ask the Expert: Mitigating Network Attacks

server broadcast

AIP-SSM-20 shunning problem for block host request

[ASA 5515-X] After upgrade from 8.6 to 9.1 no ping possible

ASA Auto Backup to TFTP Server

Resolved! Does 5505 with security plus support context fw

Resolved! webVPN and active directory

ASA 5510 Block sending Emails from Windows XP, working fine on windows 7 & 8

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Migrating IOS 15.5 (2901) PAM / ZBFW Configuration to IOS XE (4331)

Unable to erase disk0 on ASA from ROMMON

Set up FMC on Azure

How to set it up eNcore outputters to connect with the Elasticsearch

High CPU load at the FMC (7.0.4) caused by python3 processes

Cannot ping across Cisco Firewall 2110

Edit CSM_FW_ACL_ on Cisco FTD2100?

ASA5506-X NAT SETTING WORKING ON PACKET-TRACERT BUT FAILED IN REAL

Firepower 1120 FTD Setup

FMC Upgrade versions