Network Security

ASA5505 Hangs with: Begin to dump crashinfo to flash

I have a ASA5505 8.2(5) Apparently it has crashed. On boot is get to "Begin to dump crashinfo to flash...." and hangs forever. All I can do is power cycle it to get to the same point. Is there a way to skip the dump? I can get to rommon during boo...

NAT and inside ip to an inside ip, possible?

We have a situation where we were to setup a tunnel from a remote site to our internal net. We wereto provide an internal subnet that the remote site used to NAT from their net to the provided subnetfrom which they can then access other internal subn...

Botnet Data, who is submitting this info?

I recently purchased Botnet for an ASA and have it configured and working properly. I am however curious on who is responsible for its database content. I have seen it block many IPs that are from reputable sources with a "High Risk" label. IPs that ...

C2921 firewall vs. ASA 5510

Hello, can you please point out a comparison between C2921 router firewall and ASA5510. Also, do you think C2921 can replace ASA 5510? Thanks.

ASA policy PAT and src/dst port considerations!!

static (inside,outside) tcp 4.2.2.2 443 10.1.2.3 443 netmask 255.255.255.255What happens/is translated when a packet comes from the Internet destined for 4.2.2.2 with ..........A:Src tcp port 1025 and dst tcp port 443B: Src tcp port 443 and dst tcp p...

NAT 0 on 8.4.4 - error overlapping failover address

I'm setting up a new ASA that will be used for L2L VPN. I am setting up a tunnel that will need to permit all of our internal RFC1918 address through with no NAT.In pre 8.3, we used a nat 0 command with an access list. However, that is now gone.My ...

Resolved! ASA 5512x Hardware Reset?

Trying to setup a new ASA 5512 and like a dumbass I've somehow locked myself out.Anyone know how to do a hardware reset?

IASA SSM 10 MODULE IMAGE UPGRADE

Hello experts,I need your help on the below issue.I have ASA 5510 installed with ASA ssm 10 IPS module. This module was faulty and got today RMA from Cisco. It comes with the below image pre-installed.sensor# sh verApplication Partition:Cisco Intrusi...

IPS Aplication-log

Hi,One of our IPS (4260) showing Applicaiton-log 96%, I just need to know where these logs are saved and how to backup these logs.?Also I want to know where is the event logs are saved and is there a way to backup these logs as well?.Appreciate if so...

Resolved! netflow on Pix?

I was under impression that PIX 506 or 515e did not support netflow but, ASA did. I noticed a few post stating that its not supported on the PIX but not a cisco doc. does anyone happen to know where i can locate a document stating the above.

nat and acl for my mail server

i have the mail server MDaemon on virtual machine the Virtual box where's guest os windows server 2003. my guest os have ip address 192.168.0.253 in my local LAN 192.168.0.0/24. my asa 5510 with asa 8.4.2 is on 192.168.0.10. outside interface of asa5...

Last Date of Support for Cisco ASA 8.2

Hello,I can't find a Last Date of Support for Cisco ASA 8.2, neither End of Life/Sale... maybe Cisco still has to announce it ?Thanks

IPv6 compliance for Cisco IPS-4240

Hi,I need to know the IPv6 compliance for Cisco IPS-4240 with the appropriate IOV version number and Image Name.Also please provide which IPS IOS version supports IPv6 features.Thanks.

Identity Based Firewall doesn't work using Citrix Published Desktop environment

Hi!We are using the newest release of AD Agent (1.0.0.32.1, built 598). The ASA Firewalls 5520 are having the software release 8.4(3)8 installed.The problem:When somebody tries to connect thru the Identity based firewalls from a citrix published desk...

DMZ to inside access ISSUE !! ...assitance appreciated

Allow the web server(193.170.4.2) in DMZ to communicate with the our exchange server(10.77.51.87) internally via SMTP..for which I used access-list acl-dmz permit tcp host 193.170.4.2 host 10.77.51.87 eq smtp but it did not work. Is it because of th...

Network Security

Forum Posts

ASA5505 Hangs with: Begin to dump crashinfo to flash

NAT and inside ip to an inside ip, possible?

Botnet Data, who is submitting this info?

C2921 firewall vs. ASA 5510

ASA policy PAT and src/dst port considerations!!

NAT 0 on 8.4.4 - error overlapping failover address

Resolved! ASA 5512x Hardware Reset?

IASA SSM 10 MODULE IMAGE UPGRADE

IPS Aplication-log

Resolved! netflow on Pix?

nat and acl for my mail server

Last Date of Support for Cisco ASA 8.2

IPv6 compliance for Cisco IPS-4240

Identity Based Firewall doesn't work using Citrix Published Desktop environment

DMZ to inside access ISSUE !! ...assitance appreciated

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Packet tracer says NAT pool exhausted

Cisco FTD send RST when dropped by Snort / IPS

Firepower 7.2.1 - Issue with the FlexConfig Text object override

Re: FMC is disabled in System>Health>Monitor

Private VLAN's interaction with ESXi and firewall

vFMC setting with bugsssss

FMCv upgrade path from v7.1.0

FMC new local admin cannot console or SSH

FMC API - can not associate a prefilter policy to an access policy

What is the result of placing, on ASA outside int, ACL...