Hi, is there any good practical advice on testing an IPS?
Hi, is there any good practical advice on testing an IPS?
Hello All,I have a ASA5550, with a IOS version 8.2(5).I would like to upgarde to the latest version, and I believe it is 9.1.1.Any comments or tips that anyone wants to share, I would really appreciate it.Thanks,Alfred
We just licensed one of our ASAs at a branch office with the botnet filter license and I'm already seeing some hits in the ASDM. My question is really about the reliability of the results. I know with the IPS sensors, it's pretty common to get fals...
Hi,I am getting alert on high discard rates on FW interfaces via a monitoring tool. Just want to validate if the packets dropped by ACL's are also contributing to the high discard rate counter? If this is the case what would be an acceptable thresh...
Hi ,We are using Cisco ASA 5550 with verison 8.0.5.We having below setup in our network Site 1 Site 2 | |Fw -------> Metro ------> Int Fw ----Internet Setup - - Each site havin Cisco A...
hello to all members:- i am trying to convert my old ASA ios config to new. could you guys review and let me know the convertion is look correct???oldaccess-list MGMTSOFTWARE_access_in extended permit tcp 192.168.3.0 255.255.255.0 host 10.0.9.5 eq...
Hello Everyone,I need configure destination NAT in my ASA 8.2 version only for a specific origin.Today, the network 10.84.25.0/24 access the web server with IP 172.17.3.150, i need nat the IP 172.17.3.150 to 10.96.202.10 only for 10.84.25.0/24 networ...
Hi Experts,I believe this everyone is doing OK and getting along with your are doing? I have this funny scenario that happened on ASA 8.4 I configured recently for DMZ static nat. See the topology attached. I did configure the inside with a PAT objec...
one Customer is using Cisco VPN Client 5.0.07x to connect to servers from home. This works well in all OS, except Windows 8. When they install Cisco VPN Client on Windows 8, thay can connect to VPN gateway but unable to access any of internal serv...
Hi All,I'm configuring the nat on a ASA5525 running on 9.1.2 and got 2 questions, 1. Is the below overlap warning message normal and will not cause any issue? 2. Is there a simple way on 8.3 and later to fulfill the same functionality like 8.2 and ea...
I had a working active/passive pair of ASA5510's, and then I had to do a rush firmware upgrade, but didn't have time to do it on the secondary at the same time. Now I have made config changes and upgraded the secondary firmware to be the same, and w...
Hi All,I'd like to see if an ASA is blocking / dropping traffic whenI try to connect to a server. I'm basically getting timeout errors every so often, and want to see if it's the ASA which is in the path of the traffic.What's the best Debug command t...
Hi,I would like to config "when host X on vlanX goes to a network that is across an ipsec tunnel, for which vlanX network is not in the encryption domains, translate host X address to that of the asa in a network that is part of the crypto domain".In...
Hi,I just managed to completely screw all our tunnels when trying to configure l2l to allow a remote peer with dynamic address to form a tunnel with me.I'm pretty confident that my dyn map kicked in on every tunnel, and then the phase 2 would fail be...
Hi everybody I am just trying to understand how Cisco's security products evolved so I can better understand themThese are some questions I have:1) Before PIX came along, what Cisco product we used and what security features we could implement with...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Subject | Author | Posted |
---|---|---|
06-25-2025 04:32 PM | ||
06-25-2025 04:40 AM | ||
06-24-2025 07:03 PM | ||
06-20-2025 07:10 AM | ||
06-19-2025 07:32 AM |
User | Count |
---|---|
4 | |
4 | |
4 | |
2 | |
1 |