Network Security

server looses network access when vpn is active

When I start a VPN-session my server looses internet access. The server is host for a few virtual machines and they have internet access.using 5505 and asa is version 8.4(2).The nat-setup is like this:3 (inside) to (outside) source static any any d...

Trying to Map inside host tp Public IP - gets two Public IPs?

I's like to map an Internal IP to an External IP. I have the Following code:object network myserver_o host 192.168.1.40object network myserver_i host 10.1.0.40object network myserver_i nat (hbg-inside,hbg-outside-192) static myserver_oWhen I look a...

Resolved! Unable to access internet with ASA

Hi all,I am new to ASA world.I have config ASA 5505 and it is conencted to layer 3 switch that connects to cable Modem.ASA is config with DHCP option and PC is able to get the IP from ASA.But from PC i am unable to access the internet.From ASA its...

Resolved! upgrade_startup_errors while upgrading IOS

Hi all,I have upgraded the IOS on ASA 5505.After doing upgrade i did sh flash126 1189 Sep 28 2012 17:27:39 upgrade_startup_errors_201209282327.logneed to know what are these errors is my start up config changed ?do i need to do something for...

ASA5505 Multiple Licenses

I have an ASA5505 with the base license and need to create a fully functional DMZ and 15 SSL connections. I know I need to purchase the Sec+ license but am unsure on what to buy for the SSLs.Can I purchase 2 ASA5505-SSL10-K9 to achieve 20 SSL or do I...

IPS 4270-20 signature 1466/0 not working?

Hi, we installed the latest signature db on the appliance. When we test signature1466/0 the signature does not fire. The exploit is running on a test webserver.Why does it not work?Regards Marc

Resolved! Adding Content Security to an ASA5510-BUN-K9 Firewall Edition

Hi guys, I have an ASA5510-BUN-K9 in this version:###Cisco Adaptive Security Appliance Software Version 8.0(3)6 Device Manager Version 6.0(2) Compiled on Thu 17-Jan-08 17:42 by buildersSystem image file is "disk0:/asa803-6-k8.bin"Hardware: ASA5510,...

Anyconnect with IPSEC

A customer has a 5505. According to the datasheet the limit of IPSEC sessions is 25 and the limit of anyconnect sessions is 25. Does that mean I can have 25 IPSEC tunnels and 25 Anyconnect tunnels at the same time? The customer needs at least 50 conc...

Resolved! ASA sysopt commands

Does anyone know if turning on the sysopt connection timewaitoption an ASA will affect any current traffic if it is already on production. Just crossing the T's here.

Resolved! How can I map SSH from an outside network range to an internal host (ASA 5505)

Cisco Adaptive Security Appliance Software Version 7.2(4)Device Manager Version 5.2(4)- External network range that needs SSH access: 8.8.8.0/24- Outside interface: 10.1.10.2 (NAT'd from 7.7.7.7)- Inside Network: 192.168.100.0/24- Inside host to redi...

OSPF Input Packets Ignored

I am trying to configure my ASA 5545 firewall in area 0 but when I do so, the neighbor relationship never establishes. A debug on OSPF gives only one response:OSPF: Input packet ignored.Here is my configuration:ASA 5545:router ospf 65310router-id 10...

Cisco ASA 5505 50-user bundle or Cisco ASA 5505 Security Plus bundle

Hi,I have a question about Cisco ASA 5505 firewall.We need 3 interfaces on the firewall , "inbound", "outbound" and "DMZ" , to control traffic between these zones. Can we do this with Cisco ASA 5505 50-user bundle , or do we need to purchase C...

IDS on ASA5505 / ASA5510

Hi,how do I configure IDS on a ASA5505/5510? Can these two ASA ever IDS without an additional module?Where can I find a manual oder book for the configuration of IDS on a ASA5505/5510?I`m not looking for the IPS, because I know that I need for the IP...

Resolved! management of ASA5520 from ITsupport subnet

Currently have an ASA5520, management port is set to management only connected to a management vlan, inside, outside and dmz ports also in use for respective traffic, all is working well, the issue i have is that the ITsupport staff on there user vla...

Help with firewall rules

This is my 1st time working with post 8.3 IOS and I am having trouble with the configuration. I would like all computers in the inside network to access lower security zones (data and dmz) via all protocols. I would have done this with a nat 0 and ...

Network Security

Forum Posts

server looses network access when vpn is active

Trying to Map inside host tp Public IP - gets two Public IPs?

Resolved! Unable to access internet with ASA

Resolved! upgrade_startup_errors while upgrading IOS

ASA5505 Multiple Licenses

IPS 4270-20 signature 1466/0 not working?

Resolved! Adding Content Security to an ASA5510-BUN-K9 Firewall Edition

Anyconnect with IPSEC

Resolved! ASA sysopt commands

Resolved! How can I map SSH from an outside network range to an internal host (ASA 5505)

OSPF Input Packets Ignored

Cisco ASA 5505 50-user bundle or Cisco ASA 5505 Security Plus bundle

IDS on ASA5505 / ASA5510

Resolved! management of ASA5520 from ITsupport subnet

Help with firewall rules

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Private VLAN's interaction with ESXi and firewall

Packets appearing in ASP DROP?

What is PID when we try to integrate with Cisco API's

Broadworks Product ID

Rule to allow L2 multicast IEC61850 Goose on transparent mode FTD

On ASA5525 with vanilla setup, need to place ACL on outside int?

CSR 1000v ACL syntax-- use wildcards or masks?

SFR sensor upgrade fails readiness check

IPS and file (malware) in an Access Control policy

Cisco ASA Syslog Message 302013 source IP