Network Security

Resolved! fwsm with multiple context and multiple SVI????

I am novice to the FWSM teachnology.We have FWSM which has the multiple context configured for the different business at one site.On ther site we have FWSM which is configured with multiple SVIs for the different business.What is the difference betwe...

Block on ASA 5100

Hi everyone,I have a cisco asa 5510 version 8.3. My company has a internet policy company like that;client use range IP 192.168.100.0/24My boss wants to block a range IP from 192.168.100.20 to 192.168.100.200, but they can access skype, email and com...

Resolved! Adding public IPs

we have a /24 range of public IP addresses assigned to us by our ISP, what would be the process of assigning multiple public addresses on the outside interface on cisco asa running os version is 9.1 ? we have an outside, inside, and dmz interface. wh...

CSM 3.2.2-Unable to log into Manager and Client

After successfully installing CSM 3.2.2 I was able to log in to the Manager and Client. Now when I try to log in to the Manager I get Forbidden - You don't have permission to access /cwhp/LiaisonServlet on this server. Additionally, a 403 error was e...

Resolved! Debugging ASA DNS inspection

How can I debug ASA (9.1(1)) DNS inspection? Specifically, the ASA is blocking the queries associated with dig requests like the following from ever reaching "the.name.server": dig @the.name.server -t ptr 1.2.3.4.reverse.somedomain.com.And I'd lik...

Resolved! Help understanding NAT for both version 8.2 and older and 8.3

ASA 5505 Version 8.2 or oldernat (inside) 1 10.0.0.0 255.255.255.0nat (INTF4) 1 10.0.4.0 255.255.255.0nat (INTF5) 1 10.0.5.0 255.255.255.0nat (INTF6) 1 10.0.6.0 255.255.255.0nat (INTF7) 1 10.0.7.0 255.255.255.0global (outside) 1 209.165.200.235-209.1...

ASA with Microsoft TMG

Hi,I am working on ASA and TMG proxy server design and need your expert advice. The setup is <TMG> ||<Internet><ASA><CORE SW><LAN/WLAN> | <DMZ>I am placi...

Resolved! Upgrade ASA 5505 v7.2.4 ASDM v5.2.4

I have been browsing the forum and the support notes for a couple of hours and haven't found a definitive answer to my question. Our ASA is on the subject versions. I watched a video on YouTube stating that upgrading the ASA is easiest if you upgrade...

I cant ping my WebServer of DMZ Zone using Public IP

Hi Everyone,I have my webserver (30.30.30.50) located at DMZ zone. The public IP of my webserver is (119.2.116.191). From outside i can ping my webserver using public IP thats fine.The issue out here is, if i want to ping my webserver using public IP...

Resolved! ASA 5540 8.4 or 9.x code? What should I use?

I am in the process of rebuilding our ASA 5540 pair. We are currently on 8.2 code with this set of firewalls and I was going to upgrade it to 8.4 being I have a couple of other firewalls running this code currently and am familiar with it. That sai...

URL Filtering on ASA with RegEx, but getting unexpected results

I'm trying to block access to dropbox.com on our ASA5510. I have it setup and it blocks dropbox.com just fine. But it is also blocking google.com. I can't figure out why. Here's my config. When it blocks google, it blocks it with the terminated by in...

connecting ASA 5510s to a DSL modem with a static IP range

I have DSL service with AT&T and I have a Motorola 3360 modem. We also have a /28 network of static IPs from AT&T. When I login using PPPoE on the modem it gets x.x.x.190 as it's address. Our range is 177-190. I have two ASA 5510s in an active/pa...

IOS Firewall doesn't install .pak file

Hi I'm installing a new pack of signature on my IOS Firewall. This is what I'm doing1.- Upload the .pak file on the flash memory.2.- Install the package with the command copy flash:IPS/IOS-S636-CLI.pkg idconf but when the insallation finish it doesn'...

IPS 4255 doesn't detect a Nessus vulnerability scan..

We tested Nessus against our legal IP range, and although the firewalls see the connections and happily deny then, the IPS 4255's (two, in series, running 7.1.6 and 7.0.7 E4 respectively) aren't logging anything on the source IP, not even in the info...

Resolved! FWSM ACL/NAT Issue

We recently deployed a FWSM on our 6503-e boxes (w/ sup720). NAT is working (PAT) but the issue I am seeing is private traffic from remote sites is not being allowed through the FW. I was able to get the remote site to ping the FWSM itself (inside...

Network Security

Forum Posts

Resolved! fwsm with multiple context and multiple SVI????

Block on ASA 5100

Resolved! Adding public IPs

CSM 3.2.2-Unable to log into Manager and Client

Resolved! Debugging ASA DNS inspection

Resolved! Help understanding NAT for both version 8.2 and older and 8.3

ASA with Microsoft TMG

Resolved! Upgrade ASA 5505 v7.2.4 ASDM v5.2.4

I cant ping my WebServer of DMZ Zone using Public IP

Resolved! ASA 5540 8.4 or 9.x code? What should I use?

URL Filtering on ASA with RegEx, but getting unexpected results

connecting ASA 5510s to a DSL modem with a static IP range

IOS Firewall doesn't install .pak file

IPS 4255 doesn't detect a Nessus vulnerability scan..

Resolved! FWSM ACL/NAT Issue

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Cisco Defense Orchestrator Export to SIEM

Cisco asaV FPR1010 image downgrade

Is there a way to fail over from ASA Multi-Context 1 to 2?

Palo Alto to Cisco Migration Tool count_summary error

FMC and multiple AD domains

Firepower 1010 cannot access web GUI

Default route to 2 different ISPs on Cisco ASA

FTD Packet matching criteria? L7 vs L3/4

question about a guide to how to buy a Firepower

the number of nat sessions of firepower?