Resolved! Enable IP options on a FWSM
Based on Cisco documentation the FWSM version 3.2(2) will by default drop all packets containing IP options. If there a way to change this?
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(10) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,642) -
Cisco Bugs
(62) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(150) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(49) -
Cisco Secure Firewall Management Center (FMC)
(262) -
Cisco Secure Firewall Threat Defense (FTD)
(313) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(23) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(47) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(32) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(265) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,581) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(325) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(95) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,594) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Open Source and Open Standards
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Automation Analytics Topics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(5) -
Other Firewalls
(1) -
Other IP Telephony
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,793) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(13) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(646) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(29) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
We encountered a strange problem in our ASA configuration. In the "show running-config":access-list inside_access_in remark CM000067 EXP:1/16/2014 OWN:IT_Security BZU:Network_Security JST:http_accessaccess-list inside_access_in remark CM000458 EXP:1/...
Hi,We have an ASA that attaches to 6500-Core. The rough network diagram is attached here.IP Segment's B&C have SVI on core, wherease segment A is on the ASA(Segment A is new & needs to be created).The leg connecting ASA to Core is on security level 1...
For Jumbo frame we have below setup server 1 connected to switch SW1 (4500) Jumbo fram eis configured on switch and server 9216server 2 connected to switch SW2 (4500) Jumbo fram eis configured on switch and server 9216server 3 connected to switch S...
Hi Everyone,We have two Different Transparent ASA in multi context mode at two different sites.On one site i can login via ASDM directly to context ASA with name IP address.Other site to ASDM login to say context ASA hostname asa5520 i have to...
Hi forum,Is it possible to force an ASA to release and/or renew a DHCP lease? To be clear, the ASA is a DHCP client in this case, getting its IP address from an ISP on an external interface. I couldn't seem to find anything in the docs for this fun...
I can't seem to get nat hairpinning to work... Most instructions on the internet indicate how to do this with commands available prior to 8.3.I've tried the following:same-security-traffic permit intra-interfaceasa-box(config-network-object)# object...
Resolved! nat translation destination port
hello We have cisco ASA in our enviroment running 9.1.3 we have prepaired two static nat rules for same purpose but one with specific port , just anted opion which one is better option I was planning to use second option only worry was will there be...
Hi,Can we make port redirection when we configuring Asa in transparent mode.RegarsAristide
Good day. Faced with the following problem:There are two offices - main and remoteMain- 2 ISPRemote - 1 ISPCurrently working vpn site-to-siteI want to arrange automatic switching vpn channel, if the main office in the mainI have set up automatic swit...
Hi Guys,I have a two ASA firewalls at two seperate locations in place and both running in multicontext mode (Internal context and External Context) and i have configured TCP State bypass on the firewall interfaces on both the internal and external in...
Hi IPS Expert,I am managing and monitoring IPS using IPS Manager Express installed on my workstation.I replace my workstation a week ago and reinstall IME.I noticed that i can no longer retrieve old events.1. Are the old events stored on the first ma...
Hello,i have cisco 880 with NPE licence, but i need encryption on this device. I change IOS to c880data-universalk9-mz.151-3.T1.bin, but i still have NPE License and only Evalution without NPE. How can i have permanent license?thanks.show license al...
Hi,I am getting lot of UDP request discarded from 10.145.0.66/138 to outside 10.145.0.255/138(Log message ID 710005).I herewith attaching the config file.Appreciate your early response.Regards / Ramesh M
Hi All,We have a IP network setup with 3 locations Branch-A, Branch-B, Branch-C (Branch-A 5510 Version 8.4(2), Branch-B ASA5510 Version 7.0(8), Branch-C 5505 Version 8.4(4)1).All the tunnel is up between 3 locations and all the traffic are passing ...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 08-10-2026 08:58 AM | ||
| 08-10-2026 02:48 AM | ||
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 4 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
