Network Security

Anyconnect mobility client

Running ASA ver 8.6(1)5.Question is do I need a license to run any connect from our Android platforms ?Currently have the following licenses installedLicensed features for this platform:Maximum Physical Interfaces : Unlimited perpetualMaxi...

Resolved! NAT Priority decisions when converting 8.2 to 8.3+

Hi,I have a situation where I'm converting a rather large amount of NAT statements (500+) from old syntax to 8.3+ syntax.It's a fair amount of work, and I'm starting to wonder how to best approach the changes to NAT decision-making with the newer ver...

Management access to transparent multimode security contexts

Hello everyone and thanks you in advance for any help. I have setup a 5515-X in transparent multi-mode and setup 5 security contexts with inside and outside ports, one admin and 4 others. The problem I have run into is setting up a management IP for ...

ASA NAT 8.x to 8.4 conversion - URGENT

I have 8.2 configuration that works:global (inside) 1 192.168.1.1nat (outside) 1 access-list Servers outsidestatic (inside,outside) 10.16.0.0 10.1.0.0 netmask 255.255.0.0static (inside,outside) 10.17.0.0 10.2.0.0 netmask 255.255.0.0static (inside,out...

Unique situation with Transparent 5515x ASAs /w Promiscuous IPS

At least, this feels unique to me. I'm hoping that someone around here can help me understand the design, configuration and setup. I feel that I'm close to being complete, but there are a few minor details that I'm not sure of.I have a client that wi...

Resolved! Abandoning Router IPS Modules?

I attended an IPS training a few weeks back where the instructor said that Cisco would be abandoning the option of having IPS modules in routers. Is this the case?

Resolved! cisco Asa 5520 context

HelloWe have a pair of cisco Asa 5520 currently running multiple context mode. We wish to change to single context mode for following reasonWe will migrate infrastructure to hosted vendor . I was thinking of configuring site to site . Current Asa we ...

Resolved! Issues in creating subinterface in ASA 5520

I am in a non-admin context mode in ASA 5520 8.0 (5) and i m trying to add a new interfaceGigabitEthernet1/2.4 172.19.4.1 255.255.254.0 manualGigabitEthernet1/2.6 172.19.6.1 255.255.255.0 CONFIGGigabitEthernet1/2.180 172.19.180.1 255.255.252.0 manua...

When both interfaces are on same security

On FWSM, when two interfaces are at same security level and you see Reset-O or Reset-I in the syslogs, how to determine who sent the reset? There's "sh np 3 pif vlan ..." command for it.However, my question, what is the equivalent command for it on A...

CSM unsupported ASA commands

Hi,Is there a url that shows the unsupported commands and features of ASAs by CSM. I am runnning version 4.3 SP1. Thank you for the input.Fadi

Первоначальная настройка ASA

Добрый день!Есть ASA 5525-X ios 8.6. С железкой поигрались и отдали мне, я выполнил команду clear configure all. Теперь на интерфейсах не могу настроить даже ip адрес. В чем проблема?И еще вопрос. при переходе с ios 8.4.2 на 9.1 есть какие-то нюансы ...

Initial setup ASA 5525-X

There ASA 5525-X ios 8.6, mode routed. I ran the command clear configure all. Now, at the interfaces can not configure even ip address. Ip neither here ciscoasa (config) # no management at the interface. No and commands configure factory-default.What...

Error: Cannot connect to NTP server or NTP server is not running - Cisco IPS

This is different scenario here: I have two Cisco IPS 4260-k9 and both are in production now. One of the IPSs is configured with NTP and works fines, but another one is not. When tried to configure when the device is ON and live in production and ...

ASA 5510 ACL for blocking outbound SMTP

hey everyone...i'm trying to configure a simple ACL to block smtp traffic from leaving my LAN -- basically prevent internal users from setting up internet email accounts in their email clients and sending through that smtp server. i want my Exchange ...

Connect 2 ASA's together without NAT

I have a strange business case that requires us to use 2 ASA's to protect an internal system. I'm trying to figure out if there is a way to connect the 2 without using a NAT between them.The setup looks like this, sorry for the crude drawingright now...

Network Security

Forum Posts

Anyconnect mobility client

Resolved! NAT Priority decisions when converting 8.2 to 8.3+

Management access to transparent multimode security contexts

ASA NAT 8.x to 8.4 conversion - URGENT

Unique situation with Transparent 5515x ASAs /w Promiscuous IPS

Resolved! Abandoning Router IPS Modules?

Resolved! cisco Asa 5520 context

Resolved! Issues in creating subinterface in ASA 5520

When both interfaces are on same security

CSM unsupported ASA commands

Первоначальная настройка ASA

Initial setup ASA 5525-X

Error: Cannot connect to NTP server or NTP server is not running - Cisco IPS

ASA 5510 ACL for blocking outbound SMTP

Connect 2 ASA's together without NAT

We want to celebrate the October Spotlight Award winners!

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

FMC - Policy optimizer for unused policies & app id policies

Anyconnect vpn load balancing using DNS roundrobin with SAML possible?

Deployment failures on SFR via FMC

It's possible to reload SNMP service on Cisco FTD 2120

RADIUS authc for SSH access to FTD, session terminates after login

After upgrading Snort2 to Snort3 errors popping out and other problems

FMC Site to Site VPN Question

FPR1010 Port 443 https Web Access issue

Cisco Firepower 7.2 - Blocking Page with Malware & File policy

Support port mirroring on Cisco ASA 5515X Layer 3 port