Hi out thereJust got my attention on this other discussion on hign cpu on ips module - we have a set of 5585x where the ips module (quad core) is showing very high cpu utilization - 75% - according to the IME 3 of the 4 cores are running 100% and the...
Hey,I would like to know if ACL could filter specific packet type or unique packet id. How does it work? Let's say i have some captured packets, how do i filter some of them?For example: i want to stop Meterpreter to open a session. I've analyzed the...
I'm currently working on setting up 2 ASA 5510's with redundancy/failover. I'm not an expert when it comes to the ASA's so I'm not 100% sure if I can do what I need to.I have 2 inside networks that need to remain separate, a DMZ network,and an outsid...
Hello,This question is in the context of servers sitting in a colocation environment behind an ASA5510 with security plus license.Our colo provider is going to be statically routing a /28 public subnet to our ASA5510 (say 1.1.1.0/28). We will also b...
At my last count there were 182 different "match protocol" statementsone could put in an inspection class-map.Some of these inspections are there only to allow you to filter on L7fields. Some, FTP for example, must be in your class map or active-mod...
Hi allcustomer has ASA cluster pair which is running 8.2 (5) This firewall is participating in the OSPF process, and the affected interface are in the "Area 0". "Remote stations" are also a Cisco components (eg, WS-C3750-24TS-S with 12.2 (44) SE5, Wh...
I want to configure ASA 5510 with complete redundancy first time. I have already studied all material from cisco web site. but there are avalible alot of material.and i'm confused about the exact my requirment material. please help me about this scen...
HelloThree zones/interface are used on ASAInternet - security level 0Inside - security level 100 with ipsec configured for vpn clients DMZ - security level 100Traffic from Inside to Internet works fine without ACL.Traffic from DMZ to Internet works w...
I'm having an issue working with a PIX 7.0 that has lots of history. There is a ton of entries like below:static (inside,outside) 192.168.1.0 192.168.1.0 netmask 255.255.255.0I'm trying to make one ip address on that subnet come out as the firewall e...
HelloI´m triing to setup a QoS policy on ASA 5515, i read several pages, but my questions are, how setup the real BW?, or is not necessary to do this?Thanks
ExpertsI have IDSM-2 on VSS that works in promiscuous mode and i want to configure the TCP rest interface and test it , my configuration is attached
I have an issue accessing ASDM. please be paient with me as i am quite new to this. It was working all fine yesterday until i was making some changes to the NAT rules and it just locked me out. not sure what i did wrong. It all seems to be working in...
We are getting vulnerability scanned by a PCI company and keep getting failures that state "OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG". I've opened two TAC cases and TAC said that this vulnerability was addressed several versions back (we're c...
Hello allI have a special problem I would like to introduce to you all. If you can help me, all the better.We have a customer that has a PIX firewall in his network which a supplier uses to access their product. There is actually four product in ho...
I am trying to troubleshoot an ASA550 connectivity issue. My initial tests are to ping the Internet router from the ASA This is failing and also a sh arp only shows internal addresses. Before I have to go to site to check this out can anybody confirm...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 11-06-2026 12:20 AM | ||
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM |
| User | Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
