Hi Everyone,Need to understand the network hereSay we have ASA which has gi0/0 interface and we do subinterfaces of this and it has trunk connection to switch.gi0/0.1 outside vlan 10gi0/0.2 visitor vlan 20gi0/0.3 wi fi vlan 30say we have 2 dh...
Hello,i have a weird issue,ASA is setup for nat, has a public IP for outside interface and 10.0.0.0/24 for insidei tried to put in static route for 10.0.9.0/24 for gateway 10.0.0.12 (inside) , here is how i did it:new name for network:name 10.0.9.0 O...
As i know that internal user can browser internet web page that prove the traffic can come back to internal network even access-list with deny any statement.Is it the ASA with CBAC enable automatically or the traffic can come back due to dynamic NAT ...
On the ASA's I know Higher security levels can access lower security levels. Does that all change once an access list is applied to the higher level interface? For instance I have an inside interface within the 172.16.1.0/24 network. The inside int...
Hello,I have an interesting issue I can't figure out. My setup is simple; <inside network (192.168.1.x)> -------> ASA---------> Inet.Clients on the 192.168.1.x subnet can ping 4.2.2.2 and get icmp replies with no problem. However, if I try to do an e...
I have an ASA 5505 with ASA version 7.2(2) and ASDM version 5.2(2) and I am attempting to open ports 88 and 5445 and forward them to the IP address of my DVR. This is all new for me. I see several posts for other software version to do this same th...
Hi ,I have read that it is possible to migrate from a 525 to an ASA via a upgrate to pix asa version 7.0 then using the migration tool once copied to the new ASA 5500 series, but i have alos read in a forum somewhere that a migration from PIX to ASA ...
One of my sensors stopped getting updates before Christmas. When I tried to manually update the sensor, I got the followig message that said there wasnt enough space on the drive. I have 4 other sensors that arent showing this problem. I followed ...
I am very new to Cisco ASA and I am trying many days to implement the design below but still cannot get it done. The situation I am facing is- a host (e.g. 192.168.5.10) under Inside interface can contact to outside without any problem.- however a ho...
hi alli tried adding a content rule on my asa 5515x, it say i don' t have one configured in configuration/firewall/url filtering. when i got there, i need to configure either websense or smartfiler. Are those free or I need to purchase that from th...
Hello - I have a remote ASA with four subinterfaces configured. All four subnets participate in a site-to-site VPN tunnel back to corporate. Currently I'm unable to ping the MGMT subinterface, although I have configured ICMP inspection as well as man...
Hello, my network is getting effected with Spam and Malware. we have cisco asa 5510 but i'm not security specialist. can someone help to get this stopped hitting into my networkMany Thanks kz
Hi guys,I'm newbie in a FW matters, I need to apply some filters between our corporate network and our industrial networks (FTP traffic and some special ports for telnet matters). For that I'm using an ASA 5510 building a etherchannel with 3 of its F...
I am working with a small off that has a 5505 acting as a basic firewall. Behind it are off-the-shelf unmanaged switches. Two users have to work with an outside vendor and are having issues. They have a Sonicwall remote VPN client on each of their...
Hi everyoneNeed to confirm if we have extended ACL with object group belowaccess-list xy_access_in extended permit ip object-group xy_subnets object-group cisco_ynetworks will above ACL allow all the ports on the destination objec...
