Dear Team,I am going to deploy cisco ISE (1.2) at one of our customer sites.I am able to join the ISE with Active directory and users are able to authenticate with their Domain login ID.Problem:- I am not able to retrieve/See the acitve directory gr...
the only way to build a anomaley detection knowlege base is put IPS in learning mode for a time like 72 hours or is there any file or resource to download? I mean KB file and put into sensor something like that. Anomaley Detection Knowledge Base page...
My customer bought a Cisco ASA5510 already. Now they want to buy IPS module AIP10 for the firewall.I'm wondering if I can buy only the service CON-SU1-AS1A10K9 which include SmartNet service for hardware and signature update for IPS ? OR I have to bu...
Hi all, We have recently adquired an ASA 5585-X SSP20 with a CX20 module. I have configure the management interface for both (ASA and module) but if i try to access the module from the ASA i got: "Card in slot 1 did not respond to session request". ...
This is a 2 part question...How many split tunnel VPN's can a ASA5510 handle?What are the necessary commands/steps to setting one up?I have not done this in a while and I want to make I don't mess it up.thanks
hi all,i'm going to open ports for a VPN tunnel on our ASA 5520 FW.please advise if i would allow the protocol IP or GRE or both to able to run a VPN tunnel between 2 routers?access-list OUTSIDE extended permit ip host 2.2.2.2 host 1.1.1.1
I am unable to get the ASA interface port number (e.g. gig 0/0) using Object ID's . Currently we are using object ID : 1.3.6.1.2.1.31.1.1.1.1However this OID only provides the ifnames configured for the interface.regardssalim
I have a problem once again I am trying to reach a webserver which is located on the inside interface 192.168.190.27 from the Guest Interface which has 10.10.10.0See the diagram: I can ping from for example 10.10.10.103 a windows 7 client to the serv...
Hello,2 things if I may.I have upgraded our ASA 5520 from 8.2 > 8.4 > 9.1.3 and I was wondering if I can now create rules where the destination can be a FQDNs rather than an IP? We have some hosted clusters in the 'Cloud' and using a FQND would make...
Hello,I have the following situation, and not sure if the ASA can do this or not?We have just ordered Comcast Ethernet [Fiber] service. They'll be installing a managed switch [Layer 2]. They'll be handing off an IP of x.x.138.114/30 to one of our dev...
I know in the ASA5520 we use, i can created multiple syslog servers to send syslogs to. However, I am wondering, is there a way to segment the data? IE - We have a "generic" syslog server that gets all the syslog data (ncluding Informational), but I...
Hi Everyone,We would soon be replacing our local web filter with symantec cloud web filtering. How to configure external proxy on the ASA to point to the web server in the cloud. we want to send both http and https traffic to the cloud web server on ...
