Network Security

Resolved! Anyconnect license clarification needed

Good day everyone,I know it has been discussed before but still after reading cisco.com and Netpro resourcesI came up confused about this, so would much appreciate clarification,if possible with references .Issue is simple - ASA5505 , client wants to...

Stable IOS and Design Guide for ASA-5585

Hi AllI'm migrating a client away from legacy FWSMs running release 4.1, to new ASA-5585s. The current design involves a pair of legacy 6500's (not VSS) at their two DCs. each running separate FWSM HA's. The two DCs are connected via a ...

Resolved! New site-to-site VPN_LAB

Hello everyone,Last week I created a new discussion for NEW site-to-site VPN, worked with Jouni Forss to configure the ASA 5505 running-config for 8.4 for connecting to a remote company using public IP addresses for our site-to-site VPN.I thought bes...

ASA Firewall Failover Issue.

Hi......!I am having two ASA 5520 firewalls which are configured as Failover, but from two days back my second firewall (Stand by) is changing its state,Due to which my core switches (4506-E) are changeing there status in HSRP.......!Please see the b...

FWSM CBAC

Hi,With CBAC I can inspect traffic, with FWSM can I configure the same process? thanks

Resolved! Deny TCP (no connection) from inside to inside

Hi, I have a communication problem between 2 servers that are behind a firewall.I'm trying to connect from one to the other through TCP 3306 port and, after a lot of system configuration checks and tests, I found the following records in ASA debug co...

Not able to Reach only one network after connected to Remote VPN Site

Hi ,I have a cisco ASA 5520 Firewall at my office and i have 4 Diffrent subnets in my network , I am connecting my office using cisco VPN client and i am able to access 10.10.1.0 , 10.10.0.0 , 10.10.35.0 network servers , only thing i am not able to...

Multiple Cisco Security Notice posted in ISC Diary

September 2,Noitced an item posted in the ISC Diary about a vulnerabilities in Cisco's ASA software, including the memory mgmt, RIP, Web Admin interface....My question is....how related is the ASA software to the ISA software.....and has Cisco anounc...

Resolved! Setp by setp ASA 5505 configuration to inspect traffic

I,I´m strugling with the correct steps to configure ASA to inspect traffic and allow only some traffic form inside to outside and outside to DMZ.Correct my steps if necessary:Configure interfacesIP addresNameifSecurity LevelConfigure NATTranslation f...

PIX-515E NAT Static Problem

I have a problem with a PIX'm trying to make a NAT, and want to know if it may be with any origin, as would be the expression to make a static NAT?I need help with this problem static (outside, inside) 172.31.89.5 any_source 255.255.255.0 0 0Greeting...

Resolved! outbound web request to internally hosted (natted server)

Hi, I've got an issue with hairpining traffic on the ASA, it's a bit different to the usual VPN in/out query, not sure of the best way to approach this:[example names/IPs used]a)Web server hosted in dmz. External DNS resolves www.example.com to 8.8.8...

ASA-SSM-CSC-10 Memory

I have dug up a ASA-SSM-CSC-10 and its got no memory or flash in it, can anyone advise what type of ram and size of flash it should have, I can't find it anywhere?

Resolved! IP spoof question cisco ASA

I got the following,Deny IP spoof from (0.1.0.4) to 10.1.1.101 on interface intranetTraffic has correctly been denied but ip verify reverse-path is not configured on intranet interface to prevent ip spoofing. So, how did the ASA denied ip spoofing ? ...

Resolved! Will capture Command Cause Any Impact?

hi all,i've got few ASA 5510 currently in production that i want to capture some packets. i tried to look for docs or link if the capture command will cause any effect or impact on the ASA performance but i only saw this doc in cisco and some cisco w...

ASA v9.1 -- disable flagged ACEs would not re-enable w/o reload

Hello all, I recently moved our 5501 from v8.2 up to 9.1... And I have been getting used to the new format of the ACLs and NAT statemnts. But I have a puzzle that I can't seem to justify. Maybe others can help either with something I am doing wro...

Network Security

Forum Posts

Resolved! Anyconnect license clarification needed

Stable IOS and Design Guide for ASA-5585

Resolved! New site-to-site VPN_LAB

ASA Firewall Failover Issue.

FWSM CBAC

Resolved! Deny TCP (no connection) from inside to inside

Not able to Reach only one network after connected to Remote VPN Site

Multiple Cisco Security Notice posted in ISC Diary

Resolved! Setp by setp ASA 5505 configuration to inspect traffic

PIX-515E NAT Static Problem

Resolved! outbound web request to internally hosted (natted server)

ASA-SSM-CSC-10 Memory

Resolved! IP spoof question cisco ASA

Resolved! Will capture Command Cause Any Impact?

ASA v9.1 -- disable flagged ACEs would not re-enable w/o reload

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

Knowledge Hub: Cisco Technology for Securing the Enterprise

Announcing Resources That Guide You to Success

Comcast/Ciena handoff to ASA5506?

Cisco FPR-1010 always boot to FXOS mode

Cisco FTD portscan

ASA-AWS - EC2 IMDSv1 required for the PAYG license to be applied

how are blocking cookie and java be applied in real situation?

Cisco ASA ACL and NAT for RDP through subinterface allow any

is this flow impossible?

DDOS and "Error processing payload: Payload ID: 1"

ASDM unable to login for v7.18(1)152

Logging Informational Configuration in Cisco ASA