Network Security

ZBFW - dmz-zone to in-zone access

Hi IOSers,I have a Cisco 2901 which terminates a Class C address pool.I have split the Class C address pool into 3 sub-nets and 2 zones and created a non-addressable pool (private pool):dmz-zone : x.x.x.0 TO x.x.x.127 (x.x.x.0/25)in-zone: x.x.x.128 T...

Resolved! Cisco ASA IPS With Application Inspection

Hi All,I am not sure if this is the best place to log this request, as it is both an ASA and IPS best practice question.Anyhow, I was wondering what the best approach was to integrate a Cisco IPS AIM module into an existing Cisco ASA configuration, t...

5505 looking for latest version of OS available

I have a ASA5505 and currently running Version 7.2(4). I was wondering what the latest version of the software would available to me would be.Here's a show verCisco Adaptive Security Appliance Software Version 7.2(4) Device Manager Version 5.2(4)Comp...

Issue in CSM Installation

Hi All,I have installed Cisco Security Manager 4.1 successfully but due to one windows update I have started facing as Issue. CSM Apache service is not able to start. It is giving error code 1.We have also raised a case with Cisco...

Cisco ASA - IP Sec VPN on sub-interfaces

All,Can ASA sub-interfaces run separate IP Sec VPN tunnels eg There are 02 sub-interfaces of 01 physical interface of Cisco ASA5510 [ASA Version 8.2(5)] and I need to run 01 IP Sec VPN tunnel on each of these Please help,Thanks,

Cisco ASA5505 PPPoE no internet - Help needed

We currently use a linux software based firewall called IPCop that sits between our network and router (This is in bridged mode) IPCop conects over PPPoE and everything works fine. However the system is not reliable and I fear not that secure so have...

Resolved! Cisco ASA licencing problems

Hi,I'm new with Cisco licencing... I have Cisco ASA 5505 product in home with base licence with 10 hosts limit. More information below.I bought upgrade "L-ASA5505-10-UL=" to remove hosts limit and I got certificate with PAK. But when I go to Cisco li...

Resolved! Asa 5505 not forwarding RDP

Hello everyone,I have an ASA 5505 and I cant get it to forward RDP, but I do get hits so Something does work.I have attached my configuration. Can someone help me with this please? Just need to forward the RDP (Remote Desktop Protocol) to 10.0.20.2--...

Resolved! ASA5505:- BUN-K9, 50-BUN-K9 or UL-BUN-K9???

Hello you knowledgeabe lot! A have a question - sorry if this has been asked before but I couldn't find an answer using the search facility....I need to use a firewall to segregate a lab from our main network.I don't need any 'fancy' features, no VPN...

Email Access for three Cisco Firewall

Hi All :Below please see my client email access picture in attach file. It happens the email access from DMZ zone of RTDB firewall fail to Edge Network mapped IP address.Funny thing is the access from partial network is OK as indicated separately : ...

Cisco ASA problem with third public IP Address in the Subnet

Hello,i have an intressted problem with my ASA 5510 CSCi configured many firewalls till yet and i configure the normal static often times but this time it is not working as assumed.Cisco ASA 5510 in failoverPublic Network: is a x.x.x.128 /28the two i...

%FWSM-3-106010: Deny inbound tcp src

Hi all,I’m having the issue in subject, in a fwsm, but the strange this is that I have the acl created to allow the traffic. And there is no “deny” rule that can cause any issue.Can this be caused by nat-control?Thanks all

Resolved! ASA 5520 and ACL between two subinterfaces with the same security level

Hi guysI have an ASA 5520 running 8.0(3) with two Subinterfaces configured like this:=================================interface GigabitEthernet0/1 nameif inside security-level 100 no ip address!interface GigabitEthernet0/1.72 description VLAN 72 vlan...

Cisco IPS 4255 Monitoring mode issue

Hi all,We have a Cisco IPS device in monitoring mode, monitoring 2 segments of traffic via spanned ports on two different 3750-x switches (inside and DMZ). After a period of say 2-3 hours the ports just stop passing traffic to the IPS device. To chec...

Resolved! Adding new network to IPsec VPN

Hi We are having a IPsec VPN Tunnel setup with client.The far site gave access to a new range (a website basically hosting on their site)-10.40.36.173:8085They allowed traffic across the tunnel from: 10.40.36.173:8085 to 10.20.42.0/23, 10.21.42...

Network Security

Forum Posts

ZBFW - dmz-zone to in-zone access

Resolved! Cisco ASA IPS With Application Inspection

5505 looking for latest version of OS available

Issue in CSM Installation

Cisco ASA - IP Sec VPN on sub-interfaces

Cisco ASA5505 PPPoE no internet - Help needed

Resolved! Cisco ASA licencing problems

Resolved! Asa 5505 not forwarding RDP

Resolved! ASA5505:- BUN-K9, 50-BUN-K9 or UL-BUN-K9???

Email Access for three Cisco Firewall

Cisco ASA problem with third public IP Address in the Subnet

%FWSM-3-106010: Deny inbound tcp src

Resolved! ASA 5520 and ACL between two subinterfaces with the same security level

Cisco IPS 4255 Monitoring mode issue

Resolved! Adding new network to IPsec VPN

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Unable to erase disk0 on ASA from ROMMON

Set up FMC on Azure

Cisco FPR 2130 10G interface packet loss

How to set it up eNcore outputters to connect with the Elasticsearch

High CPU load at the FMC (7.0.4) caused by python3 processes

Can't login to FTD GUI

ASA5525 HA pair: ASDM only accessible to secondary (not primary)?

LOCAL Server Group Account Lockout

Disable SSH v1 and telnet on FTD via CLI or FMC?

Changing session timeouts, logging/syslog, etc. on FMC?