I found the following rule on an ASA:Source Destination ServiceMarketing any tcpDoes this mean that marketing can access any tcp service since it doesn't specify one (http-80 or https-443 for example)?When I move the mouse...
Hello guys!Tomorrow I will be creating a rule that needs to be applied to both of our ASAs. Is there a way within ASDM to push that rule onto the other ASA? Or do I just log into the other ASA and create the same rule?Thanks in advance!
Hi,I went through similar posts to this one but I didn't find the answer I am looking for. I'll explain what I am trying to do:I have a DMZ (50) from where I need to allow some protocols to inside zone (level 0). I am doing that with ACL, but after h...
Recently my csm 4.4 stopped getting updates for IPS, I get this error: "certificate on server has changed from that viewed and accepted by user" (picture). I found this one https://supportforums.cisco.com/thread/2193364 but root on my version of csm...
Hello Experts, We have CSM 4.3.0 Service Pack 1 on our Windows Server 2008, Standard Edition. During the initial installation, we mistakenly setup Windows 2008 Standard Edition instead of Enterprise Edition. Now we must have to upgrade to Enterprise ...
Hi All, I need to allow one of the vendor to park their server in our network and plan to place it in DMZ zone, but the server need secure access back to their DC and we need to publish and pull data to/from the server Am wondering is it a good idea ...
Hi guys,Got a problem and need some advice.I am about to migrate from ASA 5505 to ASA5510 (see the attached diagram).This is the current topology and it is about to remain with the new ASAs.The ASAs are/will be in HA mode.I am experiencing problems ...
I'm firewalling several DMZ like networks on a PIX running 8.0 and I've just tried to move to an ASA 5510 running 8.2. The config moved over verbatim, but after bringing up the network on the ASA I started to see odd DHCP issues on one of the DMZ ne...
hi alli have internet before i did lacp/trunking/vlan between my asa and switch, now i can't! asa config (incomplete--------------------------)hostname asadomain-name abc.comInterface GigabitEthernet0/1 no shutdown nameif dmz security-level 100 ...
I am getting this warning on my ASA 5505 when I try to set up logging from my off site FW to the central FW, which is a 5510. What I am trying to do is send the FW logs through the VPN Tunnel into the central 5510 to our logging server at 192.168.22....
Is there a conversion tool? It would make my life a lot easier to convert 43 firewalls with failovers. Thank you in advance for your help and assistance.
I would like to see embryonic connections of some IP's but Id like to do this with SNMP and I´m looking for a MIB for this. I see the embryonic connections with the command "show local-host x.x.x.x" but Id like to do this with a MIB in SNMP.
Hey Guys,Let's say I have the following setup<---LAN---><---ASA---><---ISP--->On the ISP have the following networks.150.10.20.0/24150.10.30.0/24150.10.40.0/24The ASA is configured as such.int e0/0ip address 150.10.20.2 255.255.255.0nameif outsidesec...
Hello All, I have the following set up running in one of our customer sites.Internal Network ---------- ASA Inside ( Private IP )--------ASA Outside(Private IP)------- Cisco Router interface 1(Private IP)------- Cisco router Interface 2(Pu...
