Network Security

Resolved! ASA 5505 SIP Configuration without NAT

I am new to using the ASA 5505 appliance. I have successfully configured it so far, but the one piece that eludes me and I can't find an example of configuring SIP with internal (DMZ security level 50)) VoIP phones to an external call manager (exter...

Upgrading Cisco ASA 5510

Hello,I contact you concerning the vulnerabilities in Cisco ASA 5500 Series (Advisory ID: cisco-sa-20121010-asa).Our firewalls (ASA 5510) are in 8.2(5) version.Regarding this page : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory...

Resolved! IPS notification question

Can some one tell me what exactly these two log notifiations mean:event_id = 1349377765028007908severity = mediumapp_name = sensorAppreceive_time = 10/18/2012 09:00:31 event_time = 10/18/2012 14:00:30sensor_local_time = 10/18/2012 08:06:30sig_name = ...

Static VS Route

Good Day, I have a question ,I have a ASA 5505 and 2 isp's and a security plus license, what I am trying to accomplish is the followingISP1 = Default RouteISP2 = Special TrafficWhat I have done is route ISP1 0 0 ( My ISP 1 DFG ) 1route ISP2 0 0 ( My ...

Packet flow in 8.4 ios explain

I think packet flow is changed in 8.3 IOS and above.We are using private NAT for ouside traffic.can any body explain me why we are using private IP for outside traffic

'global address overlaps with mask'

static (inside,outside) <global ip> <local ip> netmask <local ip netmask>When I enter the above in my pix 501 (mind that whats in the <> is an ip address) I get an error message that says 'global address overlaps with mask'Any ideas?

Resolved! nat (inside) 0 access-list NoNAT_inside

Can someone Explain what the following does on my PIX firewallnat (inside) 0 access-list NoNat_Insideaccess-list NoNat_Inside line 1 permit ip lan 255.255.0.0 dmz 255.255.255.0Lan = 10.10.0.0DMZ= 172.172.172.0I'm am under the impression it denies the...

I need to DMZ access to internet and see the inside on ASA 5520

Hi everyone.I am new in ASA, I have the DMZ (10.1.1.0/24) configured on ASA 5520 and I achieve the reach Internet from DMZ (10.1.1.0/24), but now need reach DMZ from inside (172.16.12.0/24) and inside (172.16.12.0/24) from DMZ (10.1.1.0/24), in othe...

Resolved! Cisco ASA 8.6 -> EIGRP not working

Hi!We have 2 ASA5510 and 2 ASA5525. Got a very weird error; up to release 8.4 eigrp works fine, after upgrading to 8.6 eigrp stops working.If i do 'sh ei nei' i get this after upgrade to 8.6:GRPCPDFW01# sh ei neighbors deEIGRP-IPv4 neighbors for proc...

dhcpfailover setroute: what is it used for, it works without using this

We use multiple context mode on FWSM and dhcp relay but never configured setroute and it works.Does anybody know when to use this feature under what circumstances?**********************Step 4 (Optional) To change the first default router address in t...

NAC Guest Server - hard coding the sms country code

Hi all,We have a NAC guest server in our environment which we use to add trusted guest wireless users to our network. We successfully use the Email user facility and wev'e now successfully got the SMS part working too. Is it possible however to 'hard...

Resolved! DMZ to other DMZ cannot discuss

Hi, I try to find a solution but got some problem ... I got Two DMZ, one name "Dmz" and other "service" I can have the same security level but not a problem. I want that traffic from Dmz to service works in some TCP port to some IP and from ...

ASA 5510 Tutorials?

Does anyone know of a good tutorial video or site for the ASA 5510s? I'm specifically looking for something on how to get around the GUI; adding rules, etc. Thanks,Steve

FWSM 10 Gig performance issues

Hi all,Our customer is experimenting really bad performance when runing 10Gig traffic through FWSM on C6509. Test with1 Gig traffic are providing find result perfromance as expected in this document: https://supportforums.cisco.com/docs/DOC-12668. I ...

Resolved! 802.1q with ISR IOS firewall

HiMy basic query is whether a dot1q trunk carrying 2 VLANs (guest wireless and corporate LAN) can still be firewalled using the zone based firewall on an IOS firewall on a 1941 ISR. Here's more background:It's for a number of branch sites that will h...

Network Security

Forum Posts

Resolved! ASA 5505 SIP Configuration without NAT

Upgrading Cisco ASA 5510

Resolved! IPS notification question

Static VS Route

Packet flow in 8.4 ios explain

'global address overlaps with mask'

Resolved! nat (inside) 0 access-list NoNAT_inside

I need to DMZ access to internet and see the inside on ASA 5520

Resolved! Cisco ASA 8.6 -> EIGRP not working

dhcpfailover setroute: what is it used for, it works without using this

NAC Guest Server - hard coding the sms country code

Resolved! DMZ to other DMZ cannot discuss

ASA 5510 Tutorials?

FWSM 10 Gig performance issues

Resolved! 802.1q with ISR IOS firewall

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Unable to erase disk0 on ASA from ROMMON

Set up FMC on Azure

How to set it up eNcore outputters to connect with the Elasticsearch

High CPU load at the FMC (7.0.4) caused by python3 processes

Connect with anyconnect to ftd internal interface eg. guest-wlan

ASA-- Any special config needed for this (simple?) connectivity?

Cisco Firewall Firepower 1010 update error

FTD - IPSec failed

deploy error message "policy has been altered since, retry deployment"

Old NAT ASA Config Question