Network Security

Resolved! ASA 5510 'bounces' UDP packets. Why?

Hi. I hope to find someone who can shed a light on something that is bugging me for days now. We have an ASA (5510, running 7.2(2)) to connect our subnets to the backbone of the ISP. I received complaints about one specific connection, which I'll "dr...

Resolved! ESMTP connection dropped

hello,We are working with an ASA 5520 and it seems there is an issue with some email messages sent throught it.When there are many recipients in the emails the email messages are not sent, and I have revised the server an the only thing I see is conn...

Resolved! ASA Configuration - NAT problem - Overlapping Networks

We currently have 3 networks - Support, Monitoring and Client where we are trying to allow our support network to access a server in the client network.Normally we would create VPN's between the client site and both our Support and Monitoring network...

Process Host Lookup in ISE

What is meant by "Process Host Lookup " in Allowed Protocol Service in cisco ISE? I am new to ISE and trying to understand authentication policies.This is the link I was referencing: http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_a...

help, error connection Cisco Identity Services Engine with AD, global catalog port status error

Dear all, I have Cisco Indentity Services Engine, that connected to Active Directory. When I test connection detailed,the result is error, said:Test Connection ResultsThis dialog shows the detailed logs for the operation for: idsv0018.Status: FAILED...

PIX525 disable smtp inspection problem

Hello,PIX525 OS 6.3I´m configuring a service of mail relay in my network, but i cant send mail's outside my network.In telnet to my relay server outside and i recieve the 220*********************************** message.I already have the "no fixup pro...

block all ip addresses except one

I want to block all ip addresses except one from connecting to the computer. Is there a device (firewall) for the same?

static nat not working

I have a very simple request on 8.6 code, I need to translate a public ip address to a private on a given port, I have the following :object network obj-TEST host 192.168.10.10!object network obj-TEST nat (inside,outside) static 88.88.88.88!access-li...

Resolved! Port forwarding for a single IP address

I need the following ports forwarded for a single ip addressPort 88 (UDP)Port 3074 (UDP and TCP)Port 53 (UDP and TCP)Port 80 (TCP)Is there an easy way to to it with service objects/groups?

ASA Registration

Do we need CON-SNT to register a cisco ASA?Please let me know the procedure to register csico ASA.

Resolved! Can't access certain websites

Hello,I'm having an issue with my firewall, and I absolutely can't figure it out.I can access the internet fine. However, a few select websites are not working (www.yahoo.com)I can ping google.com, but I can't ping yahoo.com.This wouldn't be a big d...

Resolved! ASA Choosing Next Hop IP

Hi all,Need to confirm if ASA has 2 routes to destination which one it will use.Destination IP is 172.16.121.0route x 172.16.0.0 255.240.0.0 172.16.100.254 1route x 172.16.0.0 255.255.255.0 172.16.100.1 1Here we see routes to destination.As pe...

Arp requests not getting through ASA 5510, v8.2(1)

Hi There,I'd be very interested to hear if anyone has experienced this problem beforeProblem Descriptiondevices on a network attached to the ASA 5510,v8.2(1) seem to "disappear" off the network. i.e. they are not pingable from outside that network al...

Resolved! ASA-8.4(3)

Hello..We have DMZ interface on ASA 5510. A L2 switch is connected to DMZ interface and all DMZ servers are connected to L2 switch.Everything was working fine on 8.2(5). Recently we have upgraded 8.4(3) and after upgardation we are finding that DMZ s...

ASA CPU and MEM usage percentages

Hi Everyone.I am looking for Cisco Recommended values for opperational enviroments of ASA's. Example CPU 0-30% Low , 31-60% Meduim and 60-100% High.When is it considered low meduim or high usage on ASA's? As I can custom create a document. but would ...

Network Security

Forum Posts

Resolved! ASA 5510 'bounces' UDP packets. Why?

Resolved! ESMTP connection dropped

Resolved! ASA Configuration - NAT problem - Overlapping Networks

Process Host Lookup in ISE

help, error connection Cisco Identity Services Engine with AD, global catalog port status error

PIX525 disable smtp inspection problem

block all ip addresses except one

static nat not working

Resolved! Port forwarding for a single IP address

ASA Registration

Resolved! Can't access certain websites

Resolved! ASA Choosing Next Hop IP

Arp requests not getting through ASA 5510, v8.2(1)

Resolved! ASA-8.4(3)

ASA CPU and MEM usage percentages

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Question on S2S Tunnel to Azure using FTD or Azure Native S2S

Setting out TCP MSS on FTD only for non-ipsec endpoints

Cisco Stealthwatch ipfix exporter

FMC - Error mesasge: Unable to reach Cisco Cloud from the device

CISCO FXOS Upgrade - API

How often does IPS update on Firepower devices

ASA Nat re-order, renumber, existing nats, add new ones

HA pair in Active/Active. Cannot deploy policy

FMC Management Center is out of compliance.

Default action to FTD