Network Security

Resolved! ASA config modifications in Active/Active mode

Hello,I have two ASA 5510s running in Active/Active mode. I need to make config changes on them. How do I go about it? Do I power off the secondary ASA and make the config changes on the primary and then power on the secondary ASA ? Or this another w...

SSM blocking avira antivirus update

Hello,I have an issue from one of our branch office site that after spyware/grayware is updated the avira antivirus update on client PC is failed. When I have passed the traffic through the firewall instead of SSM module then it is successfully updat...

ASA5580 port channel to 6509 VSS

Hi All,I hope this is the correct location for this.Anyway, here's the situation I'm trying to configure several VLANs on my ASA to uniquely allocate to contexts, the VLANs will be trunked from my VSS.Unfortunately I'm not clear on how to achieve thi...

Signature update impact on tuned signatures

Hello all,I would like to know, if the signature version update (e.g. from 665 to 667) could affect tuned signatures.For an instance, if the severity or fidelity value is changed from default to tuned value prior the update.Does the update set the de...

Resolved! ASA5525X Crash during packet trace

Hi all,Can someone help me regarding this one? Our Firewall is just new. ASA5525XToday, during a packet_trace to debug a routing problem, the active ASA- thsasaprd02 - crashed suddenly.I was able to copy-paste the console - including the command that...

ASA 5505 License Upgrade

Hi,I have a Cisco ASA 5505 device with basic (default) license, currently all my reirections, VPN's, VLAN's(3 Vlan's) etc are configured on the same and are working fine.Now i need to upgrade my basic license to "Security Plus" for some additional fe...

Can’t access an external IP on my own firewall from within the LAN network.

Hi Everyone, We are facing an issue for a while now and i do not figure out a solution yet. Basically we have different customers using the same 5510 firewall. We have created one sub interface for every customer on the inside interface. There are d...

Cisco ASA Netflow traffic delayed to Solar Winds

I am currently testing Netflow accuracy on my Solarwinds platform. So I have been transferring a large file across an ASA 5520, which is set up to send Netflow data to out Solarwinds server.The problem is that the Netflow data does not show up on Sol...

Disabling NAT CONTROL

Dear,I have a ASA 5520 with nat Control enabled in my job. This firewall is very critical for bussiness process, so I'd like to confirm with you what happen if I disable this control. This command is an update legacy of the IOS version from a Cisco P...

Resolved! AIP SSM-10 setup and testing

In my lab, I have a new 5510 with AIP-SSM card. I believe it is configured correctly to evaluate traffic, but I can't be sure. Here is part of the ASA config:class-map global-class match anyclass-map inspection_default match default-inspection-tr...

Resolved! Host in DMZ cannot get outside (ASA 5505)

Hi there,Based on the configuration pasted below, we believe the host (10.0.2.200 / 255.255.255.0 GW: 10.0.2.1 with external DNS servers configured) should have access to the web. However, it cannot resolve any names nor can it connect outside. Any i...

Move config from one ASA to another

I'm upgrading ASA firewalls from a 5510 (running 8.2.2 code) to a 5515-X (running 8.6.1 code). What is the best way to move the existing config to the new firewall? Can I simply copy it?

Cisco ASA5510 +SSM10 setup

Can anyone tell me if Cisco is going to continue support of the SSM10 IPS with the 5510 and 5520 Firewalls. I cant seem to find the system images for setup on them. This usually means that they are going to eventually drop it ( within next 2 years)I...

ASA5555-x IPS question

We recently moved to a single ASA5555-x firewall that has the IPS software module in it.However it is currently inactive.I would now liek to enable it and spend the next month or so in promiscous mode.IPS image 7.1.4 is on the firewall but i have yet...

Resolved! PIX 515e :Allow LAN users to access ISP assigned Public IPs

Pix 515e 6.3.4I have this situation :A web server on our DMZ is exposed for external access from ANYWHERE like this:static (DMZ,outside) 111.111.111.10 192.168.2.4 netmask 255.255.255.255 0 0 access-list DCT permit tcp any host 111.111.111.10 eq www ...

Network Security

Forum Posts

Resolved! ASA config modifications in Active/Active mode

SSM blocking avira antivirus update

ASA5580 port channel to 6509 VSS

Signature update impact on tuned signatures

Resolved! ASA5525X Crash during packet trace

ASA 5505 License Upgrade

Can’t access an external IP on my own firewall from within the LAN network.

Cisco ASA Netflow traffic delayed to Solar Winds

Disabling NAT CONTROL

Resolved! AIP SSM-10 setup and testing

Resolved! Host in DMZ cannot get outside (ASA 5505)

Move config from one ASA to another

Cisco ASA5510 +SSM10 setup

ASA5555-x IPS question

Resolved! PIX 515e :Allow LAN users to access ISP assigned Public IPs

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

SSL VPN Authorization using Azure SAML

Change IP address of FMC HA standby node

FTD Multi-Instance Data and Data-Sharing Interface

Firepower integration with Openldap

Adding Clustered node in SNMP manager gives error duplicate name

Internal Server Error and Certificate key usage inadequate for attempt

Where to migrate SFR redirect rules on FTD appliance

ASA 9.6 Global Inspect Policy

How to deploy Cisco Firepower Management Center?

Cisco FTD send RST when dropped by Snort / IPS