Network Security

Can CISCO ASA locate anyconnect geographically and block access if the client is out of the country.

can any one tel me that is it possible to restrict the access of a cisco anyconnect client based on its location. for example one guy is on vacation out of the country and tries to access the cooperate network, however until now he can access until a...

Individual Ports vs Ranges

Hi, just a quick question about best practices for an ASA5520. I'm currently running a pair of these as internal firewall for my organization, and have about 750 rules dictating traffic. A lot of the rules are for individual ports to specific server(...

Resolved! Certificate Strength - Network devices

How can I check what the cypher strength is of locally generated certificates on cisco IOS devices (firewalls, switches, routers, wlc, APs etc)Additionally, is a local certificate generated with a cypher lower than 1024 considered weak?Thank youDGW

Resolved! multiple inbound static nat on ASA

Hi,We have a requirement to do the following nat on Internet facing ASA,for inbound traffic from internet towards local lan servers.Our ASA is running ver 8.2(2)210.18.171.24 --> 201.203.22.50 ( private ip 10.96.10.95 & 10.96.10.90 , both on tcp/21 p...

Resolved! ASA QoS Priority

Hey,i have one question!i established VPN between 2 sites allowing VOIP thru the tunnelmy internet speed is 4Mbpsi want to give priority for VOIP and E-mail (SMTP,POP3) during congestion while dropping other packetsdoes my Configuration fit my scenar...

NAC in WLC 5508 with dynamic Vlan assignments based on usergroups in AD

hi,I have CAM , CAS & WLC 5508 . I need to place users in VLANs according to User Groups on Active Directory .Is this feature supporting ???RegardsDileep

Resolved! Tracing Connection in Multi context ASA

Hi Everyone,Trying to trace the path going via the ASA in Multi context Active active Mode.Need to check the port connection between 2 serversServer A is connected to switch 1Server B is connected to Switch 3Here is topologySw1 Sw2 ASA Sw3ASA...

ASA OS 8.4(6) and ASDM 7.1.3

Hey, I was going through the release notes on cisco website of ASA 8.4.6 and ASDM 7.1.3 but I just can not find a definitly answer: if ASDM 7.1.3 can run with 8.4.6?If there is a page to answer me, please just point me there...Thanks,/S

ASA 5505 : how to block certain URL on certain users

dear expertsI am using ASA5505 and I would like to block certain websites such as facebook.com on some users onlyany idea how to do it ?many thanks in advance & best regards !Tee

Configuring inbound NAT for an IP protocol

HiHow do we configure an inbound NAT for IP protocol 41 from the outside interface to a DMZ host within ASA v9.1? A 1:1 translation is due to the sparse IPs not an option.ASA v9.1 refuses to configure a service translation when it's not a TCP nor UDP...

Resolved! ASA NAT/Traceroute Inside to Outside Issues

Hi All,Product in question: ASA5512-x in HA Active/Standby Failover modeWhen running a ping from the inside network to a device on the internet I recieve replies and all is good. However when running a traceroute from inside the network to a device ...

Resolved! Secondary ASA interface Flap when issue write Standby

Hi,i never see this before, but on newly purchased just configured firewall.when i do wrtie standby.All interfaces on standby unit flaps.is it some IOS bug? my firewalls are Hardware: ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores) ...

S2S vpn between ASA5520 and 5505 with 2 subnets on diff VLAN

Hi,I hope somebody can tell me if the following situation is possible:Site A:ASA5520VLAN data subnet 172.16.10.x/24VLAN Voice subnet 10.0.0.x/24Site B:ASA5505 Base licenseVLAN data subnet 192.168.10.x/24VLAN Vo...

Cisco ASA CSC HTTPS Traffic Filtering

Hello,I am interesting how https filtering is working on ASA CSC module. When https filtering is enabled, should I import any certificate in csc which is trusted by users ? And what procedures should I complite to enable https filtering ?

Does ASA support NFS version 4? If so, in what version?

I don't have an ASA to test but I have Cisco Pix version 8.0.4 to test; however,it is not the same thing so I have to ask:- Linux NFS client on the outside interface with ip address of 192.168.1.1.Default gateway for linux NFS client is the pix outsi...

Network Security

Forum Posts

Can CISCO ASA locate anyconnect geographically and block access if the client is out of the country.

Individual Ports vs Ranges

Resolved! Certificate Strength - Network devices

Resolved! multiple inbound static nat on ASA

Resolved! ASA QoS Priority

NAC in WLC 5508 with dynamic Vlan assignments based on usergroups in AD

Resolved! Tracing Connection in Multi context ASA

ASA OS 8.4(6) and ASDM 7.1.3

ASA 5505 : how to block certain URL on certain users

Configuring inbound NAT for an IP protocol

Resolved! ASA NAT/Traceroute Inside to Outside Issues

Resolved! Secondary ASA interface Flap when issue write Standby

S2S vpn between ASA5520 and 5505 with 2 subnets on diff VLAN

Cisco ASA CSC HTTPS Traffic Filtering

Does ASA support NFS version 4? If so, in what version?

Unable to edit and save a text object

CSCwo71835 - The NAS-IP-Address attribute is missing

FMC API to get real time VPN/S2S tunnel and CPU/Memory perf metrics

Firepower 2130 -how to resolve plugin 70658 SSH Server CBC Mode Cipher

Yubikey for authentication to protected applications on FTD

SSH with X509v3 certificates

FPR‑4145 EOL/EOS ?

Firepower 4125 - how to resolve plugin 157288,

Cisco FMC QoS filtered by application

Disable checking of SIP traffic on FTD via FMC