Network Security

Resolved! Remote Access VPN Setup

Hello Support,I have a question regarding a remote access VPN setup with the following. I have a Cisco 6500 with multiple VLANs, and an FWSM setup in mutliple context mode. Each of our clients sits behind their own context, and has their own associat...

FWSM Basic question

Hello to everyone:-i need guidence regarding FWSM. i am runing FWSM in my poroduction network and first time i am try to add and assigne one vlan to Fwsm.i know the command which assigne vlan to FWSM that is below:firewall vlan-group 1 vlan-id......c...

dns through asa returns inspect-dns-invalid-pak

ASA5510, ASA 8.0(4), ASDM 6.1(5), this is a productino ASA with plenty of lookups working through its 3 interfaces - outside, inside, dmz. The problem is a new use. I've segmented a switch on the inside network with a VLAN, and have a workstation r...

Resolved! Basic NAT Question

Hello,I'm new to the new NAT statements in the ASA configs. I've held off as long as I could, and now I am configuring a shiny new ASA 5525-X to replace our older 5520. Alas, I cannot hold off any more.My question is, when I upgraded our ASA 5520 t...

Does the ASA 5510 support /31 mask?

Hi,I've got an ASA 5510 8.2(1) and have to move to a /31 Internet address. Is the ASA capable of it?Thanks.

Resolved! Pix 501 configuration to ASA 5515-x...

Hello, I'm an Administrator and have a client that is running a T1 (point to point) with a 501 Pix box as the firewall between the Dsl and internal network. We are switching over to Fiber Optic (Client has 3 locations all tap into a central datab...

Problem with ASA active/standby set-up after migrating to new ISP circuits

We have an Active/Standby ASA5540 firewall set-up with the Primary Active unit at our head office site (Site A) and the Secondary Standby unit at our DR site (Site B)Both sites had their "outside" interfaces directly connected to our ISP (We connect ...

ASA 5510 - how to limit port forwarding to specific public subnet

I'd like to limit port forwarding to an inside IP so that only one specific /24 from outside can use that portright now any outside (public) IP can use the port.IP's for examples onlylimit outside Public IP's to 192.168.2.0/24 instead of anyport 4444...

ASA 5505 Config

First, some background.I started out a number of years ago using the Pix 501s. Now I am using ASA 5505s. I know enough to be dangerous, but not enough to be useful. That being said, assume I know nothing, as this is largely the case. I have a basic u...

Resolved! Two ASA IPVPN tunnel ikev1 and ikev2

DearI have using 2 ASA 5510 to make IPVPN tunnel. From my experience. I tried to used ONLY ikev1 are working fine. or I tried to used ONLY ikev2 are working fine for the tunnel connection. So, any suggestion for me to keep using ikev1 or need to c...

Resolved! Max # of VPN clients & site-to-site VPN tunnels simultaneously on ASA 5505

Hi, I wanted to know the maximum VPN client sessions (using the Cisco VPN client) and Site-to-Site VPN tunnels that I can connect to my ASA 5505 simultaneously. In other words, if I have x VPN clients and y Site-to-Site tunnels, at any time, does...

traceroute through ASA, followed examples, not working, what did I forget?

Hi all,I have an ASA 5510Cisco Adaptive Security Appliance Software Version 8.2(1)Device Manager Version 7.1(1)52Compiled on Tue 05-May-09 22:45 by buildersSystem image file is "disk0:/asa821-k8.bin"Config file at boot was "startup-config"Hardware: ...

Resolved! What does "ret_val 5" mean when using SSH and NAT

Hi,I have a CIsco 2921 running IOS 15.3-3.M1. I am trying to create a zone based firewall rule to permit ssh traffic from any host outside my network to use NAT to forward port 8222 to 22 to connect to a specific server inside my network (192.168.10...

ASA Asymmetric routing

I believe I am seeing an asymmetric routing issue but not so sure. ASA version 9.1(1)We have the management interface (management-only configured) connected to an upstream router. Management default route out is towards this router ( and also its IP ...

Network to Network access.

We have asa's at our hotels. We have a brand network and our local network. I am trying to get the 172 nw to access the opera server and back. The given us a port on their netgate to access the server and assigned it the 172.16.10.200 address. I had ...

Network Security

Forum Posts

Resolved! Remote Access VPN Setup

FWSM Basic question

dns through asa returns inspect-dns-invalid-pak

Resolved! Basic NAT Question

Does the ASA 5510 support /31 mask?

Resolved! Pix 501 configuration to ASA 5515-x...

Problem with ASA active/standby set-up after migrating to new ISP circuits

ASA 5510 - how to limit port forwarding to specific public subnet

ASA 5505 Config

Resolved! Two ASA IPVPN tunnel ikev1 and ikev2

Resolved! Max # of VPN clients & site-to-site VPN tunnels simultaneously on ASA 5505

traceroute through ASA, followed examples, not working, what did I forget?

Resolved! What does "ret_val 5" mean when using SSH and NAT

ASA Asymmetric routing

Network to Network access.

Cisco FTD/FMC IPsec Tunnels: “Up” Doesn’t Always Mean Working

Cyber Vision Sensor version

FTD 7.2.5.1 → 7.6.2 Upgrade sftunnel TLS Failure — Certificate Mismatc

Suppress Closed Responses on Non Existent TCP/UDP Ports

FMC Upgrade to > 7.4 || 7.6

How does BGP flowspec work

FTD to AWS VPN gateway IKEv2 phase 1 lifetime mismatch

IPs needs to excluded from protected network Site to Site VPN on FTD

FTD HA Pair - Config Sync Status: What does "Sync Skipped" mean?

FTD Route Based VPN question