Network Security

2 asa connected via vpn - Public server over vpn

We have asa connected via vpnSite 1 is liveSite 2 is in. StandbyWe have a web site (asa public server) which is live in site 1. We need to switch this to site 2, as the site 1 dc is shutting down. What we need to do is redirect all traffic hitting...

Resolved! no internet access from inside network of pix 525

hey friends:i am working on pix 525, when connected through console i can access the whole internet but when i connect the pc to the inside interface i have no access to the internet. the pc can ping the pix inside interface and from pix i can ping t...

Cisco ASA failover

hi,i am trying to setup a failover pair on Cisco asa 5520 - need a statefull failoverDo i need two ports dedicated to obtain the above - one for LAN based failover and one for statefull failver ? also do i need a switch in between to connect them ?co...

Resolved! NATting problem

Hi all, got another natting problem (and ACL issue) I can't solve regarding an L2L tunnel. Attached is the config, and nat control is enabled, which is actually a first for me.Issue: Tunnel to 192.168.193.0/24 comes up, showing it up at the bottom ...

SNMP - False positive

HI all,I am currently facing with an issue which relate to a false positive.if someone could help me out here I would greatly appreciate it.http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774base on ...

Can't access public ip of LAN2 from a host on LAN1

Hi all,I have a similar situation to here: https://supportforums.cisco.com/thread/2048305But i am using a Cisco 1841 with subinterfaces instead (NAT on a stick).From the internet i can access services on public IP being hosted in LAN2. But when i try...

RTP RTCP Firewalling

Hi Everyonei hope someone could help im trying confiure our zone based firewall to use application inspection for RTP and RTCP for our mitel phone systembut i cant seem to find any support for it , i get the feeling that this isnt a straight forward ...

asa not able to use internet

Hi,I am using ASA 5505.Below are my sh run.I am not able to ping my gatway i.e 182.73.131.89Please help------------------------------------------interface Ethernet0/0 description Internet Interface switchport access vlan 61!interface Ethernet0/1 desc...

Resolved! Deny TCP/ICMP Reverse Path Check on interface inside

Hi all,I was trying to take access of a Switch at the remote site from outside using interface VLAN 10 IP Y.Y.Y.YThe public IP at my location is X.X.X.XI could see logs on PIX on remote site mentioning that Deny TCP/ICMP Reverse Path Check fro...

Can't over rule implicit deny any

Hello,I just tried to over rule an implicit deny any any rule with an permit any any in my ASA but traffic keeps on hitting the last deny any rule. How can this be?The interfaces have the same security levels (0). I also have an Permit any any in the...

Resolved! ASA WCCP-GRE redirection to Websense times out

Hi,I have a ASA5585 running 8.4 that is redirecting Internet http to a websense server via GRE.The integration is working fine, except when a user PC sends a large packet (~1500 bytes).With WCCP/GRE headers, the user packet is too large to be transmi...

Can't access public ip of LAN2 from a host on LAN1, any suggestions?

Hi all,I have a similar situation to here: https://supportforums.cisco.com/thread/2048305But i am using a Cisco 1841 with subinterfaces instead (NAT on a stick).From the internet i can access services on public IP being hosted in LAN2. But when i try...

Firewall and SSH

We have a Cisco Firewall 5510.When I VPN into the network, I have to rdp to a windows desktop in order to SSH into my linux boxes.Please show me how to ssh ditrectly from home PC.

Resolved! ASA 5505 8.4(3) inter LAN connectivity issues

I have LAN connectivity issues after replacing a PIX506 with an ASA 5505 8.4(3)OK some background:"Current Network diagram"Netgear Router >>>> Cisco 506E >>>> HP procurve switch >>>>> 4 servers and 30 odd devices.Status:All devices and servers can pi...

Resolved! ASA webfilter using regex

Hi all,I have a ASA 5510, it does webfilter using regular expression. (http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml)I block "\.facebook\.com" and it was successfull. But somehow other users is using ...

Network Security

Forum Posts

2 asa connected via vpn - Public server over vpn

Resolved! no internet access from inside network of pix 525

Cisco ASA failover

Resolved! NATting problem

SNMP - False positive

Can't access public ip of LAN2 from a host on LAN1

RTP RTCP Firewalling

asa not able to use internet

Resolved! Deny TCP/ICMP Reverse Path Check on interface inside

Can't over rule implicit deny any

Resolved! ASA WCCP-GRE redirection to Websense times out

Can't access public ip of LAN2 from a host on LAN1, any suggestions?

Firewall and SSH

Resolved! ASA 5505 8.4(3) inter LAN connectivity issues

Resolved! ASA webfilter using regex

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Migrating IOS 15.5 (2901) PAM / ZBFW Configuration to IOS XE (4331)

Unable to erase disk0 on ASA from ROMMON

Set up FMC on Azure

How to set it up eNcore outputters to connect with the Elasticsearch

High CPU load at the FMC (7.0.4) caused by python3 processes

ASA5506-X NAT SETTING WORKING ON PACKET-TRACERT BUT FAILED IN REAL

Firepower 1120 FTD Setup

FMC Upgrade versions

Can't login to FTD GUI

ASA5525 HA pair: ASDM only accessible to secondary (not primary)?