Network Security

ASA Default username 9.x

I am currently trying to set up a remote ASA. I gave it an IP address, set an ssh password (default PIX username) and verified connectivity. Then I left the site.Now at the new site, I upgraded to 9.x and can't SSH to it anymore. That's when I rea...

5505 will not boot any image higher 7.2(5)

I picked up a used ASA5505 off of eBay to use in a lab environment to test the 8.3 changes before applying the update to our production units. This unit faithfully boots the 7.2(5) code, but any version above it hangs at Booting. It did boot up 8.3 i...

ASA-5585x Config Files

Where is the startup-config file stored on the ASA-5585x? I see the running-config on the system: partition, but cannot find the startup-config.

Resolved! create static nat rule cli

I need to create a static nat rule that allows outside requests to the inside interface using http. I also need to create an access rule for this. Can someone please explain and show me the command I need to use in asa 5500 firewall version 9.x?Thank...

ASA (from LAN network to ASA outside interface ping )

R1 int G0/0 IP Add 192.168.1.1/24ASAInt G0/1 IP Add 192.168.1.10/24Int G0/0 IP Add 210.19.10.10/24R2Int G0/0 IP Add 210.19.10.1/24___________________________________________ If i ping fro R1 int g0/0 to ASA g0/1 its working R1# ping 192.168.1.10!!!...

ASA 5550 8.0 sub interface causing cpu to max out

Hihow many sub interfaces can an intefaces handle on a 5550 ASA.I had three sub interfaces configured with no problems. I now need 7 for my wireless dmz but when adding more the cpu max's out and the firewall struggles.any help would be appreciated.t...

Trying to figure out out to get ASA5505 to work with Virgin Superhub

HI there,We currently have an ADSL line although we got a virgin fibre/superhub install a while back now but I have not had chance to troubleshoot this fully.So we currently have a Cisco ASA 5505 connected to netgear ADSL modem and for all intense an...

Resolved! SSH Still Working after Hostname change???

Hi all,I was under the impression (from past experiences) that SSH self-signed certificates are made up of the Hostname and the Domain Name of the router.I have been working on a customer network and I can see that the SSH RSA certificate is using th...

how can i access dmz server via public ip from inside?

hi all !As shown in Figure，how can i access the server in dmz zone via public？i can access it via private ip 192.168.1.1 now,but i can't access it via 101.100.1.2. who can help me ?thank you !

firewall with IPS &WSE sizing

Can this firewall "ASA5515-SSD120-K9" with subscription "ASA5515AWI1Y" support IPS and web-filtering for 300 users?

Resolved! How to redirect VPN traffic on the outside interface of the ASA

Hello,This picture will explain what i do want.VPN Client is: 3.1.000395 Anyconnect ASA image 8.4(2)So VPN users should be able to reach the public "internet" adresses.From testing purpose 1.1.1.1/32 behind R9 is representing the "internet"Criteria: ...

Resolved! Connecting ASA to a Switch L3

Hi,I have a Cisco ASA and a L3 switch. My question is, what is the diference between these points? :1. Put an IP Adress directly to the interface switch (giga1/1) where the ASA is connected (Inside) (ASA interface -> 10.0.0.1/30, SwL3 interface 10.0....

Resolved! Split Tunnel VPN

Hi Everyone,When we use Remote VPN to connect to Company Network and tunnel is build up and we can access the company resources.When we need to access the internet it checks the ACL in the ASA and point it to outside world.Need to confirm this tec...

Resolved! NAT exempt rule cisco ASA 5510 ver 6.2

Hi,I am new to cisco routers and am trying to understnd the NAT rulesHow do i interpret this NAT exempt rule what will it do ? how is it different from static and dynamic NAT ruleAction:ExemptInterface: APOOLSource: 192.168.30.119destinition:10.100.2...

Packet-Tracer shows Status: Drop

Hello:I have ASA 5510 and when I ran packet-tracer from dmz to outside and I noticed that on Phase 5 is show drop with this error " (sp-security-failed) Slowpath security checks failed"Could someone please one tell me if the NAT is sending traffic ou...

Network Security

Forum Posts

ASA Default username 9.x

5505 will not boot any image higher 7.2(5)

ASA-5585x Config Files

Resolved! create static nat rule cli

ASA (from LAN network to ASA outside interface ping )

ASA 5550 8.0 sub interface causing cpu to max out

Trying to figure out out to get ASA5505 to work with Virgin Superhub

Resolved! SSH Still Working after Hostname change???

how can i access dmz server via public ip from inside?

firewall with IPS &WSE sizing

Resolved! How to redirect VPN traffic on the outside interface of the ASA

Resolved! Connecting ASA to a Switch L3

Resolved! Split Tunnel VPN

Resolved! NAT exempt rule cisco ASA 5510 ver 6.2

Packet-Tracer shows Status: Drop

ASA/FTD on FMCvirtual to new FTD on FMC on prem

Secure Firewall 1200 HA topology with 03 ISP link´s and SD-WAN

FMC 7.4.2.1: Missing active sessions in Remote Access VPN dashboard

FTD not recovering RADIUS server down

FMC 7.4.2.1-30 unsets/sets DNS domain-name every day

Smart License lost after Powerfail / Reboot

Firepower 1120 has wrong (falcon demo) license active

L-CSF1230-TMC-3Y 's TOP SKU

FMC error has unknown CPU number

Cisco FirePower