Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Hello,Our hosted voice provider has asked us to disable SIP ALG, I thin it is part of our default policy map:policy-map global_policy class inspection_default inspect dns migrated_dns_map_1 inspect h323 h225 inspect h323 ras inspect rsh inspect ...
I am stuck in a failover scenario, I have ASA HA pair and there two upstream PE routers and two downstream PE routers. PE routers running HSRP and peoblem happening is as ASA HA Pair run different IP address both on primary and secondary ASA with dif...
When a packet enters a firewall on the Internet interface and exits on the inside; what is the source address of that packet on the internal network? Does it keeps it original address or is it the inside interface address?
Hi ALL ExpertWe are now using asa 5510 with asa image version 8.0(4) (Memory 256MB). Do you think we can upgrade the asa image version from 8.0(4) to asa 9.1.3? running smooth after upgrade?hugo
Hi experts,Is a cluster of 3- ASA firewalls supported on any of the new models? If yes, please advise what are the hardware and software specifications needed to support this?
Hi there,Thanks for reading!We've got a Series 800 SOHO with Ezvpn running. It get connected to our internal network through our ASA 5520 just fine. We have clients on the SOHO side which can ping and RDC to servers inside our network.The SOHO clie...
Hi,The IPS is in a promiscuous mode with fail open. I am doing some tests sweeping the network and IPS have a strange behavior that I can not understand.The firewall rules are very specific allowing traffic to specific hosts on specific ports from ...
Hi Guys,Just a question on after auto-nat as I do not get its purpose. What is the purpose of that line if its format is just the same as manual nat?If I have a configuration like this;object network spoke_site_a subnet 192.168.0.0 255.255.255.0nat (...
I have a client that is running IPV4 on their network and not IPV6, but of course IPV6 is enabled on all the windows boxes. They had an issue today where they had tons of IPV6 router advertisements flooding through their VPLS cloud all sourced from a...
I am trying to do some port forwarding on a ASA 5505. It seems pretty straight forward, but somehow it's not working. I am not too familiar with Cisco devices. This is an old firewall which I am trying to configure without clearing the old configurat...
Hello,Ive been readin all over the internet (including this site) trying to figure out if the asa can handle intervlan routing. Im not sure what I am missing on my config to get this to work. Ive read that it can work and Ive read that it cant work....
Hello,We have a number of networks that go though our ASA, but we have never been able to run a traceroute even though we have ICMP any any running on each inerface. When we try a tracert from a Windows PC to a remote destination like google it work...
