Network Security

ASA1000v or ASA5500 ??

I have a question..I have only one physical machine with VM machines installed on it and I want to connect the machines to the internet.Do i need to have a 1000v asa or a physical asa(say 5510) would work fine, as a gateway to the internet.?Any help ...

IOS Zone Based Firewall Blocking Internet Ingress

I'm very new to the concept of a firewalls. I'm attempting to block specific traffic from the internet into my router and allow only certain traffic out. Each representing the traffic flow. Example of the zone's and zone pairs would be. I'm confused ...

Blocked IP address disappearing from IPS

Dear Experts,Here in our organization , we have two IPS appliances 4260 and is configured with inline vlan pair mode.Cisco IPS IME is using for monitroing and managing there appliances. Recently i have added some of the blacklisted public IP addresse...

Transparent Firewall with BVI

Hi! I have a question regarding transparent firewalls using BVIs.Based from the diagram above, ASA1 is in Transparent mode.Port Gi0 is assigned BVI-1 and port Gi1 is assigned BVI-2.Is it possible for network 1 to communicate with network 2 ?The traff...

ASA 5510 subinterfaces+NAT nightmare

Hi guys,We have an ASA 5510 firewall and in our DMZ we have a server listening on port 443. For this server, we already have a public IP address on the ISP' router. All the traffic to this IP address on port 443 is natted to the ASA's outside interfa...

Configure internet access - ASA 5510

Hi everyone,I am a newbie and i have to configure a default-factory firewall (ASA 5510) in a simple scenário like this image represents:At this moment i have configured the interfaces as represented above and at this moment what i want is grant acces...

Connecting to NME-IPS results in connecting to cisco router itself

Suddenly, without any clear reason, I cannot access the NME-IPS in my router.Instead it connects to the router console.The IP address is also pingable.Output:gateway#service-module IDS-Sensor 1/0 statusService Module is Cisco IDS-Sensor1/0Service Mod...

ASDM 6.4(5) somehow deletes existing nat entries on ASA 8.4(4)1 model 5550

I recently did the following configuration changes on my ASA through ASDM. The changes were the following:Added a new service policy to the ASA inside interface to do some traffic policing. Also put the global policy rules in the inside policy.The bo...

Resolved! Hosts loosing IP address

hi,I have just started to use an ASA 5510 for my network. I use the DHCP server on it and after i made the change over to ASA hosts started loosing their IP address.This was not a problem before on my old firewall that aso had the roll of DHCP.Is it ...

IOS Firewall question: protocol inspection

Hi all. Recently I came to learn through trying to configure my 891 router that when configuring the zone-baesd firewall to protect SSH access to the router from the Internet, you cannot use match protocol ssh in the class map and apply an inspect a...

2 asa connected via vpn - Public server over vpn

We have asa connected via vpnSite 1 is liveSite 2 is in. StandbyWe have a web site (asa public server) which is live in site 1. We need to switch this to site 2, as the site 1 dc is shutting down. What we need to do is redirect all traffic hitting...

Resolved! no internet access from inside network of pix 525

hey friends:i am working on pix 525, when connected through console i can access the whole internet but when i connect the pc to the inside interface i have no access to the internet. the pc can ping the pix inside interface and from pix i can ping t...

Cisco ASA failover

hi,i am trying to setup a failover pair on Cisco asa 5520 - need a statefull failoverDo i need two ports dedicated to obtain the above - one for LAN based failover and one for statefull failver ? also do i need a switch in between to connect them ?co...

Resolved! NATting problem

Hi all, got another natting problem (and ACL issue) I can't solve regarding an L2L tunnel. Attached is the config, and nat control is enabled, which is actually a first for me.Issue: Tunnel to 192.168.193.0/24 comes up, showing it up at the bottom ...

SNMP - False positive

HI all,I am currently facing with an issue which relate to a false positive.if someone could help me out here I would greatly appreciate it.http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774base on ...

Network Security

Forum Posts

ASA1000v or ASA5500 ??

IOS Zone Based Firewall Blocking Internet Ingress

Blocked IP address disappearing from IPS

Transparent Firewall with BVI

ASA 5510 subinterfaces+NAT nightmare

Configure internet access - ASA 5510

Connecting to NME-IPS results in connecting to cisco router itself

ASDM 6.4(5) somehow deletes existing nat entries on ASA 8.4(4)1 model 5550

Resolved! Hosts loosing IP address

IOS Firewall question: protocol inspection

2 asa connected via vpn - Public server over vpn

Resolved! no internet access from inside network of pix 525

Cisco ASA failover

Resolved! NATting problem

SNMP - False positive

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Old NAT ASA Config Question

Set up FMC on Azure

How to set it up eNcore outputters to connect with the Elasticsearch

High CPU load at the FMC (7.0.4) caused by python3 processes

Connect with anyconnect to ftd internal interface eg. guest-wlan

Can't login to FTD GUI

ASA5525 HA pair: ASDM only accessible to secondary (not primary)?

LOCAL Server Group Account Lockout

Disable SSH v1 and telnet on FTD via CLI or FMC?

Changing session timeouts, logging/syslog, etc. on FMC?