Hi allIf I want to NAT to a pool via a vpn tunnel on my ASA, is this OK?I have done a nat from the original source addresses, destination originalthen translates to source pool of addresses, destination originalDo I base my VPN tunnel phase 2 network...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,623) -
Cisco Bugs
(54) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(149) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(40) -
Cisco Secure Firewall Management Center (FMC)
(228) -
Cisco Secure Firewall Threat Defense (FTD)
(279) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(19) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(46) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(14) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(264) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(37) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,580) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(324) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(93) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,592) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,790) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(644) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
I see a problem in my Inside Segment of Firewall, where the Primary Firewall is doing Proxy ARP for all directly connected hosts on the Inside Segment.This even causes connectivity issue to the Secondary Firewall IP from the Inside Segment.!interface...
Resolved! Inside to outide NAT
Hi,I have an ASA 5505 firewall. It was requested that when accessing internet, internal users get NAT translated to a public IP. There has to be a one-to-one translation between internal and outside IP addresses. Is it possible to do static NAT tr...
Dear Team , When we see the show ssh sessions on our ASA . it shows output as following K-ASA# show ssh sessionsSID Client IP Version Mode Encryption Hmac State Username0 x.x.x.x 2.0 IN aes25...
Hello, I followed the listed instructions to recover the password for an ASA and after rebooting the ASA I get the rommon #0> prompt.I was wondering if the below procedure is the correct one or if I am doing something wrong. Thanks for you assistan...
Hi Guys,In regards configuring redundant Interface, correct me if i'm wrong from what i understand if I bond two interface(e.g e0/0+e0/1) this will create one logical interface, so regarding the physical Interface does this means that one of them are...
Hi Everyone,For Remote Access VPN here is the current setup--User Connect to the Corp VPN via Internet it first hits the Corp Internet ASA then it connects to the VPN gateway.Say PC connects to VPN gateway IP 150.x.x.x.This IP delongs to VPN gateway...
Hi Everyone,I have configured RA VPN full tunnel.Inside interface of ASA is Vlan1 inside 10.0.0.1 255.255.255.0 CONFIGip local pool 10-pool 10.0.0.51-10.0.0.100 mask 255.255.255.0Need to know is it good des...
I need to open ports 4480 and 4481 in preparation for PARCC testing in our district. How would I create this rule to allow traffic to/from any IP address on the inside interface?
Resolved! TCP Reset-O, Reset-I, FINS
Hi everyonehope you can help me with this issue. I´m having problems when connecting to a web service on a device. My ASA has 3 active interfaces, one for the headquarter inside network (inside), one for the ISP connection (outside) and one for the r...
I am having trouble with L2TP pass through on an ASA 5505 device. L2TP server: OSX 10.6I can connect with any OSX system and it works fine straight away. When connecting with a windows computer I get a 789 error. "Error 789: The L2TP connection atte...
Resolved! ASA IOS Upgrade
Hello Experts,I have ASA 5520 with IOS image version 7.0(7).Can i do a straight upgrade to image version 8.4(5)? Thank you.
Hi,i am running a cisco asa 5520 (ver9.1) - i want to add a implicit to less secure networks and deny the rest. how can i do this ?Thanks
Resolved! ASA 9.0(2) Problem with twice nat
Good afternoon Community,i have this problem while natting source and destination using twice NAT of a bi-directional flow:Placing a new NAT line in 1st position (bolded line in the follow example) the NAT works fine both for source and destination. ...
Hi, I have asa with policy map below when ever anybody wants to upload large file it drops after some time, since i have multiple services i exclude ip of upload server from access-list and then evrything works normally i want to add and fine tune th...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
New solutions
