Network Security

Unable to allow inbound ICMPv6 on ASA version 9.0(1)

I have upgraded an ASA 5505 to 9.0(1) as I would like to use ipv6 version of dhcprelay. That said, I am unable to obtain a global unicast address but the link-local address is able to communication with the ISP's gateway/DHCP provider which I hope wi...

PIX 515E to ASA5515 Migration

Looking at migrating from the following:PIX-515EPIX Security Appliance Software Version 8.0(4)Device Manager Version 6.1(5)51toASA5515Cisco Adaptive Security Appliance Software Version 8.6(1)Device Manager Version 6.6(1)Is this migration directly sup...

Resolved! ASA5510/2960 vlan subinterfaces

Hello, I'd like to know if the setup below is a viable configuration for what I'm trying to do. All of the users are on vlan 1 for data and I created some subinterfaces for other networks to work off of. Subinterfaces were created for vlans 20,60,2...

Need help with port forwarding for https

Hi guys,Spent a lot of time what might be the issue with this one. I am setting up an ASA 5550 8.4 and asdm 6.4. Last thing I am missing is to get the static nat rule done for https. Done it with asdm and cli and always end up with "error: nat unable...

FPM and Layer 2 Broadcasts

Hello. Can FPM (Flexible Packet Matching) match Layer 2 broadcasts, based on Ethertype and first few bytes of payload? Thanks.

need to understand the nat with access-list

Please let me know what it means as it is configured on our ASAglobal (mtaas) 5 10.224.128.4nat (outside) 5 access-list EXIDE-MTAAS-PATaccess-list EXIDE-MTAAS-PAT extended permit ip host 1.1.1.4 host 10.224.128.250 access-list EXIDE-MTAAS-PAT extende...

Cisco IOS Firewall keeps stopping mobile apps

Hi allThe other day I set up a firewall on my Cisco 1841 router, it all seems to work fine except for a few small problems. 2 wireless devices an iPhone and an Android tablet are having some problems with 1 or 2 apps. iPhone 6.0.1Facebook app and t...

ASA 5510 Unable to Ping from out side interface or cloud

hione of my client has BSNL leased line with LAN IP POOL we configured those on ASA 5510 nad Internet working fine but from cloud we are not getting any response for ping requiest please find running configuration below and advice me if need any chan...

Allow users to access a internal server/webserver via the natted external address

Hello everyone,Would anyone be able to assit me in figuring this out.I have confgiured a public server via ASDM and natted it from internal to external and add the needed ports.The issue is allowing users from inside the network to also access the si...

Resolved! Remote access VPN

Hi,I have a remote access VPN to our office network 10.42.10.0. however I have some web services that are located in a production network 10.42.1.0 that users in the office network need to access.This is obviously no problem when using remote desktop...

Stateful connections and IP SLA failover

We have an ASA at site A and site B, connected via a mpls circuit on their inside interface.We have IP SLA tracking set up so if the circuit goes down, it drops those static routes, and routes the traffic out the outside interface to the internet via...

URL Redirection in ASA

Hi.is URL Redirection possible in ASAeg. i have a local aaplicaiton running eg. 192.168.1.2:8010\htappi want this to be accesses publically as 121.242.190.181:8008is it possible to configure a rule which can redirect one url to another and vice versa...

NAT/PAT Two private IP's to one Real on the same port.

Hello all.I have the following situation. A colleagues installed a spam block (Norton something) and he put two ip's on itsinterfaces. 192.168.2.20 and 192.68.2.21. One will be used to receive and one to send mail but both on port 25. They use a sinl...

Resolved! ASA Version 8.4(3) CLI NAT outside IP to inside websrv

-for some reasons we use 192.168.1.0 as outside IP and 10.177.235.0 as inside IP; -a web server with ip 10.177.235.251 is installed in inside network; -we need a outside ip (192.168.1.24) to let pc in outside network to access web server;here are cli...

ASA Failover Issue

Hellu Guys,I have got into a peculiar issue, I have 2 5520 ASA firewalls running ASA ver 8.4.2, fe days back we tested ASA failover between the primary and secondary, below is the fail over config,IMS-BLR-ASA# sh run | inc failover failover failover ...

Network Security

Forum Posts

Unable to allow inbound ICMPv6 on ASA version 9.0(1)

PIX 515E to ASA5515 Migration

Resolved! ASA5510/2960 vlan subinterfaces

Need help with port forwarding for https

FPM and Layer 2 Broadcasts

need to understand the nat with access-list

Cisco IOS Firewall keeps stopping mobile apps

ASA 5510 Unable to Ping from out side interface or cloud

Allow users to access a internal server/webserver via the natted external address

Resolved! Remote access VPN

Stateful connections and IP SLA failover

URL Redirection in ASA

NAT/PAT Two private IP's to one Real on the same port.

Resolved! ASA Version 8.4(3) CLI NAT outside IP to inside websrv

ASA Failover Issue

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

Congratulations to the July 2022 Spotlight Award winners!

Cisco ISE Session Counts

is there a tool to automatically input policy to Firepower?

What does (MAX) mean in the "show pmon state" command output?

Revert FTD HA pair to Snort 2

FirePower forward ssl decryption and inspection

CISCO FTD 1140 deployment error

Ping block is the best way for Security ?

ASA Dynamic NAT (Hide)

Cisco 2120 Firewall Unable to Update Ciphers

Firepower 4110 - Correct FXOS version for FTD 7.0.4