Network Security

Resolved! ASA 5510 failover issue

Hi allI am trying to setup my ASA5510 as active standby failover pairLicense are samo on both boxes , only diference is flash ! one box has 64Mg and the other one is 256MBafter failover configuration I had an notiffication:"Mate's license (Inside Hos...

ASA 5520 CPU High

Dear Team,My asa utilization is showing 90%ASA image : asa804-k8.binPlease find the below output.# sh processes cpu-hogProcess: Dispatch Unit, PROC_PC_TOTAL: 1557, MAXHOG: 48, LASTHOG: 3LASTHOG At: 11:27:29 GMT Jul 13 2013PC: 8172a27...

PIX, AT&T U-Verse and static IP block problem

Hello,I currently have a PIX 525 and have recently upgraded to AT&T U-Verse service. I have a static IP block and am having routing issues with the 2wire gateway that AT&T provides. After a lot of reading and calls to technical sup...

Resolved! IPS-SSM10-Events

Hi,I have been running IPS around a week back well but past a week my IPS license has expired and i have been notice that events logs are not showing.Could you pls suggest that events logs are not showing because of license expiration.

cannot access Bitvise server on port 22 from 871W

I am pretty new to Cisco gear and a newbie at ACLs but here goes...here is the ouput from #sh ip access-listsStandard IP access list 1 10 permit 192.168.1.0, wildcard bits 0.0.0.255 (1993 matches)Extended IP access list FILTERNET 10 permit tcp...

Resolved! Nat doubts

Hi Experts,I come across this link:http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0080bd5d03.shtml?referring_site=smartnavRDIn the scenario 1, it mentions the nat configuration is as below:nat (inside,outside) source dy...

Resolved! ASA failover after upgrading one license key

hi I have 2 ASA 8.2(5) firewalls for failover.ASA 1 for active and ASA 2 for standby.and,in order to get ssh AES function I upgraded ASA 1 license key.but the failover is off since now the software between 2 firewalls is not the same.(after that I co...

Web Authentication for VPN users

I have deployed a ASA 5512-X with CX. The ASA is also configured for AnyConnect VPN. I have deployed the Context Directory Agent and it is up and working for wired users. I noticed VPN users do not get mapped. Is there a way to pump user/ip mappings ...

Resolved! Port 53 DOS on 5505

A friend has an ASA 5505 that is getting DOS'd primarily from a couple of IPs at port 53. The effect appears to be that the 5505 rebooted itself. For the short term I told him to turn off the logging for that rule thinking that perhaps the massive a...

Resolved! Upgrading ASA 5540 and 5550...

I am preparing to upgrade the code on our ASAs from 8.4(2) to 9.1(2). Is there a specific intermediately level of code I need to upgrade to before reaching code level 9.1(2) and is this code level stable?

Upgrade 5512x from 8.6(1)2 to 9.1.2

I am upgrading a Active/Failover pair from 8.6(1)2 to 9.1.2 (9.1.2.SMP.ED) and want to know if I need to first upgrade to 8.6(1)10 or if I can upgrade directly to 9.1.2.I have seen notes where it says to upgrade to highest minor release before jumpin...

Resolved! Wireless guest have no connectivity in the DMZ

Hi,I am deploying a new wireless setup with two 2504 controllers, one for the corporate ssid and one for guest segment.The anchor controller used for web-authentication has 1 leg in the inside network (10.x.x.x) and 1 leg in the dmz 192.168.100.x (to...

ASA-active directory agent problem

hi all!im trying to configure the user identity feature on my asa and there isnt real debugging document,so hopefully u can help me.ive configured my ad agent on a server the installion went well and im able to see users from the AD srv.ive configur...

how do i use an active directory group for vpn and not all user

hi all,i have an asa 5515x...how do i use a particular group in active directory to have vpn/anyconnect access? right now i believe it's for all user on my current config,~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~!integrate with active direc...

ASA 5505 Base License - DMZ workaround

OK, so I get that the ASA 5505 Base License can only have a 3rd named VLAN interface if that interface has the "no forward interface XXX" command used. I have a customer with the following interfaces:outsideinsideDMZThe DMZ is currently configured to...

Network Security

Forum Posts

Resolved! ASA 5510 failover issue

ASA 5520 CPU High

PIX, AT&T U-Verse and static IP block problem

Resolved! IPS-SSM10-Events

cannot access Bitvise server on port 22 from 871W

Resolved! Nat doubts

Resolved! ASA failover after upgrading one license key

Web Authentication for VPN users

Resolved! Port 53 DOS on 5505

Resolved! Upgrading ASA 5540 and 5550...

Upgrade 5512x from 8.6(1)2 to 9.1.2

Resolved! Wireless guest have no connectivity in the DMZ

ASA-active directory agent problem

how do i use an active directory group for vpn and not all user

ASA 5505 Base License - DMZ workaround

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Firewall Migration Tool 7.7 is available to download..

FMC remote storage error

Failover license

Cisco Firepower - icmp thru FW, inside to outside interfaces

FTD Back-to-Back VXLAN

FPR-2110 (ASA-Image): Correct option at image upload?

FTD Firepower 1150 active/standby failover link

Policy Set to block specific IP address after a so many failed logins

Firepower 1120 SSD replacement procedure.

ASAv: ASDM upgrade causes error "Unable to launch device Manager from"