Network Security

Resolved! testing 5515x at home, no internet route

hi all,im new to cisco asa and the model is 5515x with license plus. below is my config at home,~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ciscoasa#ciscoasa# sh run: Saved:ASA Version 8.6(1)2!hostname ciscoasadomain-name test1.comenable p...

Resolved! Firewall Logs

Hi everyone.Here are logs from the ASA when i open up google.com192.168.10.3 Apr 15 2013 20:28:55: %ASA-5-304001: 192.168.20.17 Accessed URL 74.125.28.94:http://www.google.ca/192.168.10.3 Apr 15 2013 20:28:54: %ASA-6-302013: Built outbound TCP connec...

Resolved! Enable traffic through the firewall without the address translation

Hi everyone,On ASA ASDM under config,firewall NAT rules there is option at bottomEnable traffic through the firewall without the address translationNeed to know what does it mean?Does it mean that if user with private IP comes to ASA then A...

Allow incoming dhcp requests

We are a small ISP and I would like to move our dhcp server inside our firewall and only allow dhcp and icmp to the server. It appears that when I allow it through the access-list and NAT that the requests get to the server and the server offers an I...

Pix501 and dmz translations

Hi all,I have been remotely trying to troubleshoot a site that i just inherited that is running a Pix501, version 6.0(1). I'm not allowed to gain access to the machines on the network, nor the pix itself for remote access so I can't test anything. ...

Outbound Traffic Source Port 80

I have a Web server in my DMZ. Periodically the server sends traffic with source tcp/80 and a random destination tcp port. Is this normal?

Implementation of GoDaddy Wildcard Certificate

I've been tasked with implementing a godaddy wildcard ssl certificate on a new ASA based VPN cluster. This is replacing our legacy individual certs and is a great way to go. The issue is I've tried just about everything I can and read so many appro...

Resolved! Static NAT, Dynamic NAT and PAT

Hi All,I have a question about order of NAtting among Static NAT, Dynamic NAT and PATting. If any IP is natted in ASA configuration with Static, dynamic NAT and PAT, then as we know packet would follow the order as below- Static NAT-->Dynamic NAT -->...

Dhcp on ASA

Just a quick question regarding dhcp: is there a way to include a space in an option?I need to add thisDhcpd option 130 ASCII Mitel Ip phoneBut it errors out on Ip. Wondering if its doable or if I need to move the scope to a windows server. I thought...

Resolved! Block Traffic from specific IP in ASA 5505

Hi, we have an ASA 5505 in transparent mode and running a web service online. However, we notice a number of intrution attempts from China and Korea and we need to block traffic from those IP's can someone help please?config script is firewall transp...

ASA Failover pair with different license.

Hi all,I have a running ASA5520 in my network and recently we plan to add a failover pair as a standby unit for the running asa. Both of the ASA have the same specs and software. the only thing that the soon to be secondary ASA does not have is the A...

IPS Performance on ISR G2

Hello everybody!Can someone provide documents about IPS performance on 29xx and 39xx routers?I need data for both IOS and NME IPS's.Thanks for your help!

Cisco ASA 8.4 Destination Nat

Hi,I am facing problem in implemnting NAT on cisco 8.4the senerio is Inside interface network 10.10.10.0/24 and 10.118.0.0/16 is also routed towards inside networkOther network 192.168.10.0/24 is routed via outside interface.My requirement is to NAT ...

Resolved! ASA Nating & configuration

Hello,I have two companies and two different public IPs as well. I have enabled routing between two companies and two compny network can ping each other. I am able able to access company 1 mail server (ip aaa.aaa.aaa.aaa) from outside through company...

Largest ACL on ASA 5510

Hi,What is the largest ACL (actually object group of networks) I can use on a 5510?I'm blocking traffic to/from certain countries. I have one that is about 4,000 lines long that works fine but would like to add others and not sure what the upper limi...

Network Security

Forum Posts

Resolved! testing 5515x at home, no internet route

Resolved! Firewall Logs

Resolved! Enable traffic through the firewall without the address translation

Allow incoming dhcp requests

Pix501 and dmz translations

Outbound Traffic Source Port 80

Implementation of GoDaddy Wildcard Certificate

Resolved! Static NAT, Dynamic NAT and PAT

Dhcp on ASA

Resolved! Block Traffic from specific IP in ASA 5505

ASA Failover pair with different license.

IPS Performance on ISR G2

Cisco ASA 8.4 Destination Nat

Resolved! ASA Nating & configuration

Largest ACL on ASA 5510

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Blocking certain reverse lookup domains on FTD

Configuring OKTA SAML on FTD 7.2.5

Palo Alto to Cisco Migration Tool count_summary error

Dynamic Split Tunnelling - Android Devices

compartilhar internet com VLANS firepower asa

Cisco FTD and Cisco FMC images in CML

Architecture for ISA-3000 Firewall

Import json file to FMC

cisco firepower management center virtual gui not shown

Downgrade FPR-1010