Network Security

Ask the Expert: Security on IOS Router Devices (ZBFW, IPS, CBAC)

With Julio Carvajal SeguraWelcome to the Cisco Support Community Ask the Expert conversation with Cisco expert Julio Carvajal Segura. This is an opportunity to learn and ask questions on how to make your IOS router devices (Zone-Base Firewall, Intrus...

ASA-X High Availability

Hi, a colleague tells me the new ASA range can support Active/Active failover where you can have both devices in a pair passing traffic through the same context.This seems quite a radical advancement so I just wanted to make sure this is correct befo...

ASA 8.2 is not sending message to syslog server

Dear All,I have ASA with version 8.2.I tried to configure syslog server on the ASA with following commands.logging host DMZ4-INT 10.228.138.99logging enablelogging timestamplogging buffered errorslogging trap errorslogging asdm informationallogging f...

What's the best way to swap the interface configuration

Hi - I have a redundant pair of 5520s and I need to swap the interface configuration on them;We have a DMZ connected to the Management interface and the failover link runs over one of the gig interfaces. I'm trying to work out the best way to swap th...

VPN access-list

folks,i have a problem with my vpn client not connecting to other corporate vpn server, I have a INBOUND access-list on my router which is permitting only the below access-list. When i remove the below access-list from the interface remote vpn works ...

Resolved! VPN NAT Overlap subnets remote ASA interface does not reply

Hello all,Not really a big problem, but not knowing the answer is killing me. This is what I have:Host 1 <-> ASA 5505 <-> VPN connection<-> ASA5510 <-> Host 2 Both hosts can reach each other without issues. Ping, connect, no problem. The problem i...

Cisco ASA5510

I have cisco ASA5510 firewall using in my network but unable to bolck Url's unwanted.can i block the https://facebook.com on the asa by using regular exp.Thanks,Saroj

Cisco ASA connection dropping

I have a Cisco ASA 5505 - 50 VPN edition. I have baffling network issues that I have not been able to pinpoint and I recently started to think it may have something to do with my ASA. I'm a network administrator and I have a Cisco ASA 5505 in my ho...

Port forwarding problem

Hello all, looking for some assistance.I am simply trying to grant RDP access from the outside Internet to an internal host -- 10.0.11.254 -- on the inside-2 network. The config below is edited, but I think I have all the relevant pieces in there.Tha...

NAC 4.7.2 OOB SNMP issues

Hello,I am setting up a NAC CAM and CAS 4.7.2 OOB setup in a test environment (NAC failover for CAM and CAS), and I am seeing some strange SNMP issues. I am testing with a 3750 switch (12.2(53)SE1) using SNMP v2 and v3 since v3 and accessing the swi...

Resolved! Access ASA5505 with Telnet or ASDM from remote subnet

Hi,I have a network with 3 sites that are on different subnets. Each site has an ASARight now, I am only able to connect to the ASA that is connected to the subnet I am connected to.I want to be able to connect to the ASA that are on the remote subn...

Query on ASA and ASDM

Hi,I have object-group created on ASA box which is not showing in ASDM, here are the version of ASA and ASDM. I have tried to refresh " ASDM with runing configuration on the device" on ASDM toolCisco Adaptive Security Appliance Software Version 8.4...

How to apply Policing on Cisco ASAs with leased lines?

Hi,I'm trying to configure policing and/or shaping on a setup of 2 x ASA 5505 Sec Plus. The units are placed in office A and office B and each have a ISP connection to the internet and a leased line with a capacity of 4/4 Mbit/s for interoffice commu...

Set clock on AIP-SSC-5

How are you supposed to set the clock on the AIP-SSC-5 module?There doesn't seem to be any way to set the clock manually, you have to use NTP. The problem is that the module refuses to set the clock if the time it gets through NTP is more than 1000 s...

port redirection in asa

Hi all, I am practicing some stuff in asa. I have a host on outside network(a router) which IP is 172.16.1.2. My inside host is 10.1.10.2. Now i just want to achieve this1) From inside host, when i telnet 200.2.2.2 on port 2200, it should be redirect...

Network Security

Forum Posts

Ask the Expert: Security on IOS Router Devices (ZBFW, IPS, CBAC)

ASA-X High Availability

ASA 8.2 is not sending message to syslog server

What's the best way to swap the interface configuration

VPN access-list

Resolved! VPN NAT Overlap subnets remote ASA interface does not reply

Cisco ASA5510

Cisco ASA connection dropping

Port forwarding problem

NAC 4.7.2 OOB SNMP issues

Resolved! Access ASA5505 with Telnet or ASDM from remote subnet

Query on ASA and ASDM

How to apply Policing on Cisco ASAs with leased lines?

Set clock on AIP-SSC-5

port redirection in asa

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Cisco ASA 5515-X hanged several times.(Urgent)

Change IP address of FMC HA standby node

FTD Multi-Instance Data and Data-Sharing Interface

Firepower integration with Openldap

Adding Clustered node in SNMP manager gives error duplicate name

Internal Server Error and Certificate key usage inadequate for attempt

Where to migrate SFR redirect rules on FTD appliance

ASA 9.6 Global Inspect Policy

How to deploy Cisco Firepower Management Center?

Cisco FTD send RST when dropped by Snort / IPS