Network Security

Security Levels and VLANs

When setting up a subinterface for a VLAN...What do you set the security level at for the actual interface?As seen below, I've managed to do two different things.Intially I didn't know what I was doing...bet you hear that alot. 1) Ethernet0/1 the a...

Multiple ASA Configs for Cold Spare

I have a few sites all running Cisco ASA 5510s. They all share the same asa (8.4(4)1) and asdm (6.4.9) version, but their configs differ significantly. I have a cold spare sitting in my office in the event we have a physical failure.Is there a quick ...

Dual ISPs on ASA5510 + remote access VPN Client

Hello Alli have two public IPs on ASA5510 + Remote Access VPN Client, what i want to achieve is, i want VPN client users to be able to login using any of the two ISP's IP to remote connection to the ASA. please what is the command to use to achieve t...

FWSM (where is the debug troubleshooting facilities?)

Hi,Thanks for reading ... hope someone can help.I have just taken over some FWSM running fairly old code (3.1)I have previously worked with ASA and PIX's, so this is fairly new to me.I am troubleshooting some traffic issues. I noticed a few commands/...

Resolved! connect internet VPN clients (on pix515e) to internal resources

Hi,i just installed a pix515e ( ios ver 6.2) in my network. and the vpn users can connect to it from the internet successfully but they aren't able to connect to any of the internal resources. some other informaion: i configured nating between the in...

Ask the Expert: Cisco ASA 1000V Cloud Firewall

With Jennifer HalimWelcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about the new Cisco ASA 1000V Cloud Firewall with Cisco Expert and CCIE Jennifer Halim. The Cisco ASA 1000V Cloud...

Resolved! Cisco ASA 8.4 Multiple Context and etherchannel

Hello,ASA 8.4 supports etherchannel configuration. I'm wondering you can use the etherchannel as a shared interface in multiple context mode. As I do not have access to an ASA to test this out, maybe someone can help me out and post a configuration w...

Resolved! ASA Version 8.3 and Higher, Nat Control from lower security

Dear All,I am new for ASA version 8.3 implementation,I have read that nat control is no longer exist in this version,However, I am trying to permit traffic from lower security interface to higher interface security,Is it need to be Natted ?When I try...

Resolved! function of netmask cmd in ASA global NAT statement....

Hi, very simple question. What is the difference in the following three command sets on ASA 8.2 OS. All command are same but the netmask in the global command is changed in three different ways. Goal is simply to let all inside address NAT to interne...

match tcp flags in access-list?

Is there a way to match tcp flags in an access-list on an ASA, e.g.: match-any +syn +fin +rstor match byte[13] eq 2 match byte[13] eq 17 match byte[13] eq 4?

Resolved! asa 3des license installation

Hi all, Is it required for the 3des license upgrade for the asa5510 to reboot for the furtherconfiguration of site2site tunnels.thanksAnand

nat from inside to dmz using 8.4

I need to configure nat from inside to dmz, i have already configured one network object and now need to apply static nat from inside tor dmz It seems that you have to apply when the network object is being created but I am confuse...

7.1(6)E4 Service Pack Release

7.1(6)E4 Service Pack ReleaseThe 7.1(6)E4 service pack reverses the SMB protocol related inspection enhancements delivered as part of 7.1(5)E4 release and also addresses a Signature downgrade issue with SSM platforms.Additionally, as part of this rel...

ASA 5550 NAT - %ASA-3-201011: Connection limit exceeded

I've got an ASA 5550 running Software Version: 8.2(2); I replaced two static NAT commands below with new commands to change the connection limits: no static (inside,outside) ggg.ggg.ggg.118 ppp.ppp.ppp.118 netmask 255.255.255.255 tcp 500 1000 stati...

ASA 5505, two external IP:s

HelloI am using ASDM 6.4 to configure my ASA5505. I have two expernal IP:s, lets say 1.1.1.1 and 1.1.1.2, and with netmask 255.255.255.128.On the inside I have a SBS 2011 server with Remote Web Access (port 443). I have succesfully created a network ...

Network Security

Forum Posts

Security Levels and VLANs

Multiple ASA Configs for Cold Spare

Dual ISPs on ASA5510 + remote access VPN Client

FWSM (where is the debug troubleshooting facilities?)

Resolved! connect internet VPN clients (on pix515e) to internal resources

Ask the Expert: Cisco ASA 1000V Cloud Firewall

Resolved! Cisco ASA 8.4 Multiple Context and etherchannel

Resolved! ASA Version 8.3 and Higher, Nat Control from lower security

Resolved! function of netmask cmd in ASA global NAT statement....

match tcp flags in access-list?

Resolved! asa 3des license installation

nat from inside to dmz using 8.4

7.1(6)E4 Service Pack Release

ASA 5550 NAT - %ASA-3-201011: Connection limit exceeded

ASA 5505, two external IP:s

We want to celebrate the October Spotlight Award winners!

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

SSH Access to FTD Inside Interface

Is there any simulator where I can test ips custom signatures?

WCCP on ASA: few basic questions

Can't ping ASAv after upgrade

Firepower running ASA code using the FXOS API

Radware DefensePro and Firepower 4112

Upgrade to FMCv300?

Cisco SMC 2210 support Port-channel / NIC Bonding ?

Cisco ASA - AnyConnect default idle timeout

FTD Snort3 questions