This is what I am seeing on the IDS (lots of these with lots of attackers - but always 0.0.0.0 for victime)evIdsAlert: eventId=6824202298114 vendor=Cisco severity=high alarmTraits=32768 originator: hostId: TAMUK_IPS-9 appName: sensor...
Hi,I heard someone at TAC say that the reason there is a 9.0 code release and a 9.1 code releas--both current versions---for the 5515X is...9.0 is for ASAs without the CX module and 9.1 is for ASAs with the CX module.Then I've heard someone say...don...
We just purchased two 6513s that we are going to arrange into a VSS with two supervisor 2Ts.Each chassis will also have the new ASA services module. I can't seem to find decent documentation on how to set up active standby failover between the ASA mo...
Hi, looking at several migration scenarios at a customer, is it possible to have a 5512-X as primary firewall, with a 5510 as secondary in an active standby cluster (running the same license type)?Thanks!
Dear All,Need suggestion on ASA 5515-X High Availabilty Configuration, i want to configure our firewalls in high availability(Active/Standby). I configure the firewalls and below is the configuration of both Primary and Secondary firewalls.Primary fi...
Hi guys,Due to a complex setup on our Internet Edge network, I require a 'tcp-bypass' class map (bypassing TCP session state tracking) under the Global Policy on an Active/Standby ASA Pair.However...I now require FTP inspection in order to allow Pass...
Hi , I been able to access the firewall via ssh, but suddenly ssh got failed but able to telnet port 22 to the firewall. But it is not prompting username and password from the ASA device. So i have taken console reset all ssh configuration , then SSH...
Hi all,In a case where my pre 8.3 NAT rules are as follows where I am NATing source IPs with their original IPs to get communication going between these various DMZs.static (INSIDE,DMZ1) 10.10.0.0 10.10.0.0 netmask 255.255.255.0 static (INSIDE,DMZ2) ...
I have two pairs of ASA's Active/StanbyISP 1 is connected to ASA 1 (Used for Internet access)ISP 2 is Connected to ASA 2 (Used for VPN only)I'm planning on setting up tracking on the cores for the failover and setup a second route to the second ASA w...
Hi,We are planning to set up a IPSec VPN L2L tunnel with a client. Our client is running some internal networks(didn't disclose) and will nat his internal network with X.X.X.X public ip. We also have internal networks 10.50.101.0/24 and will nat it w...
Hello All,We had an issue today with one of our servers that sits behind our FWSM. This server has a static NAT entry with a private and public IP Address and ports opened to the outside world. It is one of a few email servers and two of these ports ...
Hello,I configured a site to site VPN and it work well. Now I want to allow PING from the remote site (172.16.0.0 /16) to the inside interface (192.168.3.254) and allow management via the inside interfaceI can PING hosts in my LAN 192.168.3.0From the...
Hi, I am facing an issue trying to understand the traffic flow on FWSM, hopefully someone can help here. We have a Web Server which is on our private network. We are also allowing access to it from Internet. There are two DNS entrie...
hello,first of all, sorry for my bad english. actually i'm french and above all an absolute beginner in ASA Ciscoi'm trying to install a Cisco ASA 5505 for a client and it's impossible to access to internet (in fact, the original subject is about cre...
Hi,We have following static port forwarding on our router;ip nat inside source static tcp 192.168.100.35 80 210.18.171.21 80 extendable ip nat inside source static tcp 192.168.100.35 25 210.18.171.21 25 extendable We want to configure this same setti...
