Good morning,I currenty have a Cisco ASA 5510 with a SSM-10 card installed but have no IOS image on the Internal flash card,How do i obtain the latest IOS and how do i go about obtaing the liecence for th SSM-10 card.RegardsPaul
Hi, I need help on clarifying how ACLs and object-groups work. I don't have extensive firewall knowledge so I'll try to explain it as clear as possible. I have read that basically everything can be an object-group (e.g. "object-group network" "obje...
Hi This is my config below. The error i am recieving is crypto map entry is incomplete. Can someone please take a look and let me know. Thank youASA(config)# crypto map outside_map 1 match address outside_1_cryptomapWARNING: The crypto map entry is ...
Guys,Do you have any experience with "NAT outside interface" in Cisco ASA 8.3 above ?I have a problemI want to do NAt-ing like this :InsideY.Y.2.14X.X.2.66 DMZ-10X.X.2.11X.X.2.66I have interface outside with ip address X.X.2.66, i want to do NAT in t...
HI,I have configured a policy to allow a traffic and logging is enabled but when i see on real time monitering on ASA i can only see deny traffic not the traffic which is allowed by that permit policy.Any body can advice on thisSys...
!interface Ethernet0/0 description Link to Starhub nameif Outside security-level 0 ip address 149.128.38.151 255.255.255.240!interface Ethernet0/1 description Link to Internal 100.x nameif Inside security-level 100 ip address 192.168.100.254 255.255....
Hello!I have my computer behind ASA dynamic nat:object network obj-192.168.22.229 host 192.168.22.229nat (inside,outside) source dynamic obj-192.168.22.229 interfaceAll works OK, and I have hosts with static nat, they work too.then I need to give acc...
Hi everyone,I don't know how to config on my ip range (192.168.172.0/24).object network FULL-IP-INTERNET "(allow full internet)range 192.168.172.1 192.168.172.20NAT (inside,outside) ...Access-list ....object network DENY-IP-INTERNET "(limited interne...
Hi All,I have two ASA 5520 version 8.2 in active Standay Mode.What is a good practice to setup IPS AIM ssm-20 for this setup.Is IPS should be in Fail-Open or Fail-Close mode ?Is Mangement ip for both IPS module should be same or diffrent. ?
I'm new to the Networking world and am trying to establish a base for my network. I'm running ASA 5510 8.4(4), how can I measrue throughput ?In the ASDM, there is a nice feature for CPU, and the command show CLI also provides good info about CPU, but...
Please forgive me in advance for being such an idiot, but for the life of me, I can't figure out why my second network cannot access the ASA or anything outside of it. If my outside interface is 55.242.141.20, and my internal is 192.168.1.0, everythi...
I have a little bit of confusion on implementing global address pools and PAT. I want to do a many to one translation. I have a FWSM that has a /24 network bound to an interface for guest wireless. All I want to do is use private IP addressess and...
I am trying to put back a NAT configuraton that I already had configured at one point, but had to delete.This was how it was configured before deletion:Object network obj-198.100.100.12 Nat (inside,outside) static 206.248.224.18I have tried to put ...
Looking at the changes in NAT syntax after the upgrade.... how would I do the following in 8.3+?1)access-list Encrypt extended permit ip 172.10.35.0 255.255.255.0 172.10.18.0 255.255.255.0 access-list Encrypt extended permit ip 172.10.36.0 255.255.25...
