HI everybody.I have few questions.policy-map type inspect PING class type inspect PING inspect class class-default pass1)What is the order of operation? The" inspect" action will apply only to class " PING" . The action " pass" will be applied to...
I have an ASA with an outside ACL that is configured to allow 208.84.248.95 SIP/5060 to 1x.x.x.46. I show no hits. I added an ACL to do a packet capture, it sees the packet coming into the ASA but not going to the ServProv interface. I see hits o...
Hello all.I am having an issue where clients at remote sites can not access website in our dmz. Any thoughts?Thanks.
Hello, I have two ports I want communication between and I feel like it should work but still even pings fail. Below are the relevant entries from the running config. Any idea what I'm missing? Thanks. P.S. (1) Because wouldn't let me post otherwise....
how to block specific ip address to use facebook and youtube in ciscoISA 500 series firewall?please answer with step by step i am new about it !
Hello Support community,I'm looking to simplify some of the nat commands that I need to use, and I would like to ask, is it possible to map 2 real ports to 2 translated ports using a single nat command? for example, I have a web server in DMZ hosting...
Hello,We have 2 x ASA 5520s in active/standby and we have a block of 30 public IP's that NAT to many servers etc and we use it for our Corp VPN. We are changing ISPs soon and we will be getting a new block of public IPs where do I even start to pl...
Has anyone had any luck getting the anyconnect client ver 2.4.012 to work inside of Windows 8. I have tried the registry hack that renames the adapter name, tried running as Administrator and compatability settings. Nothing works. Evertime I run it i...
I was asked to create rules with the following TCP ports: 41000, 41002, 41025. Since these ports did not exists, I just created new TCP service objects. The issue is I put the those ports as source port/range and destination port/range in the Add Ser...
Hi everyone,We are planning to split the Private servers from the DMZ Servers and configure an additional Interface and segment for this purpose.Private Servers Segment: 192.168.4.0/24 (there is no DHCP all servers' IPs are statically configured)DMZ ...
So everything I've read on Cisco's documentation here: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/interface_start.html#wp1329030 says that I can create a port-channel on two physical interfaces that will uplink to a VSS pa...
Hello everyone, I'm having a bit trouble to limit the bandwidth on outgoing traffic with a Cisco ASA 5505.In my case I want to limit the bandwidth to 31mbit/s up and down on the outside interface.but with my current configuration, just the download r...
Hi,How can I manage on a asa 5500 the maximum inbound and outbound traffic for a vpn session?thx,Marc
Hi everyone.I am wondering what license I need for an ASA 5505 with a standard internal and external VLAN and a DMZ with a Microsoft SharePoint server in handing out guest access to the internet and this server.Is it the standard base license or do I...
Hi..I have taken a new internet link from ISP for my new office. I am planning to terminate link directly on ASA since we want to save the cost for router.I am not much aware if this set up is more secure and functional fine. Need more inputs on this...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
