We are implementing the ZBFW on our edge routers, connected to to ISPs with BGP routing. I have copied the basic policy from another site but that site has very few if any outbound connections. What I think is happening is, the traffic goes out to ...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(85) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,521) -
Cisco Bugs
(32) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(140) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(5) -
Cisco Secure Firewall Management Center (FMC)
(29) -
Cisco Secure Firewall Threat Defense (FTD)
(44) -
Cisco Security Cloud Control
(2) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(26) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,570) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(321) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,558) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,770) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(627) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hi Everyone,IF we have two sites and each site has syslog server.Site ASyslog server IP 192.168.50.1ASA 1 Site BSyslog server IP 192.168.60.1ASA2for redundancy purposes ASA at each site will send all syslog messages to syslog server at its site a...
Resolved! ASA 8.4 static NAT statements.
Hello,I have 2 servers with static PAT configuration in pre 8.3 ASA:Server1 - 10.6.1.10 - PAT to 66.66.66.66 for SMTPServer2 - 10.6.1.20 - PAT to 66.66.66.66 for IMAP4 and http/httpsPub address - 66.66.66.66 old config:1. static (inside,outside) tcp ...
The existing statements that I have a question about in 8.0 are:global (outside) 3 interfacenat (inside) 3 0.0.0.0 0.0.0.0nat (inside) 0 access-list nonatnat (inside) 3 access-list inet_natThe nonat and inet_nat access lists are:access-list inet_nat ...
HiI have the following question. I have a 5525-X and in one DMZ a couple of ISA servers with load balancing in unicast mode (that means that both ISA server have the same MAC).When another machine (in the same DMZ) tries to send a packet destined t...
Hi,I have a simple requirment that I am hoping somone can kindly validate.Running an ASA firewall, I would like to achieve the following:I would like to setup two external routes for my firewall. The primary/default would use the outside interface. S...
Resolved! ASA5505, SYN attack, ISP and IPS module
Our 5505 is currently being hit by a SYN attack from surprise, surprise, China. The attack easily brings down the 5505 by hitting the 10,000 connection limit of the box. I am currently using the shun command to try to mitigate the problem but it is...
Hi,We are migrating from a nother brand to an ASA Cluster running 8.4.5We have a web-server on an inside interface listening on a non standard port - 20111. We have created a static NAT translating the public ip to the private, so If I do http://publ...
Hi,I have a ASA 5540 VPN Premium with 2 Clientless licensesHow many anycoonect users can i accomadate with concurrent sessions ??Thanks
We have a subnet(within public IP addrss) that is drop (into Null0 interface) from our core switch in the Inside network. Therefore pinging it results destnation not reachable. however some company outside in the network compains to us that there is ...
Hi all, We are planning to use an ASA 5540 to terminate about 3000 IPSec connections. The maximum supported IPsec VPN Peers for this platform ist 5000, so this should be ok in theory. What is a bit unclear to me is what exactly happens when (for what...
Resolved! NAT problem help!
Hello guys, I hope some one can help me out here. I have Cisco ASA 5520 with a 8.4 code in GNS3. I have a problem pinging to the internet. On the ASA console, I can ping to outside world, but on vpc I cannot ping the outside world. But I can p...
Hello.I have a question on ASA dhcpd address restriction.I've noticed that maximum available DHCP pool is restricted to 256 addresses.http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/basic_dhcp.html#wp1125257Is it merely the res...
Hi,I have ASA 5520 installed.I want to use ntp server for firewall clock setting.I found one open-access ntp server (stratum 2) in Los Angeles:dmz0.la-archdiocese.net209.151.225.100Can I use the following command to set ntp server?ntp server 209.151....
I was hoping to get a little assistance in opening a port through our ASA 5510. I need to allow a tcp connection for IP 65.74.157.196 on port 5223 through our firewall to the subnet 10.1.12.0/24. In the GUI, I created an access rule on our Outside in...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 08-29-2025 08:17 AM | ||
| 08-29-2025 06:11 AM | ||
| 08-26-2025 09:16 AM | ||
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 8 | |
| 8 | |
| 7 | |
| 1 | |
| 1 |
