Network Security

Resolved! identical policy but with a different Lifetime

I'm wondering if it's possible to create an identical policy (3 &4) but with different Lifetime? see below.isakmp policy 3authen pre-shareencrypt Aeshash shagroup 1lifetime 24600 isakmp policy 4authen pre-shareencrypt Aeshash shagroup 1lifetime 26600...

Resolved! ASA 5510 Software Upgrade Issues

Hey Everyone,One of my clients has an ASA 5510 running version 7.0(8) and ASDM 5.0(8). My question, to what versions of each software can I update the appliance to? Additionally, must I upgrade incrementally? i.e from 7.0 to 7.1 then to 7.2? I did fi...

Permit traffic from Inside to Outside, but not Inside to medium security interface

Can someone just clarify the following. Assume ASA with interfaces as :inside (100) (private ip range 1)guest (50) (private ip range 2) outside (0) (internet)Example requirement is host on inside has http access to host on outside, but...

rv042 change wep security to wpa2

i have a linksys rv042 router and it currently has wep security enabled. i need to change it to wpa2 for pci compliance. i cannot find anything about this in the user guide, tech support says the warranty is out, and the web management console has ...

Traffic Other than ICMP does not Get Policy NATed

Hi Folks, I have applied policy based NAT on one ASA firewall. Assume that Source Inside Network is 192.168.1.0 and destination (Outside) network is 192.168.2.0. Now using Policy NAT i am translating source Subnet 192.168.1.0 to a global a...

Firewall preventing Internet Access

Hi, I am having one 2800 router where the ISP link is, Another port is for ASA 5520. There are two 4503 core switches connected with firewall. When i am connect the ISP, i can ping upto ISP Gateway, but not DNS(8.8.8.8) or any public IP. as a r...

ASA Identity Firewall CDA and Terminal Services

We have installed two two ASA service modules into our 6509 switches. They are both working fine but we are now looking into the option of using the Cisco Context Directory Agent for identity firewalling.So far we have a VM running the Cisco ISO down...

Connect Inside to Outside in ASA 5505

Hi there,I have a test ASA 5505 with the setting below:How can I connect to the internet (Vlan 1 to VLan 11)TestASA5505# show run: Saved:ASA Version 8.2(4)!hostname TestASA5505domain-name default.domain.invalidenable password 8Ry2YjIyt7RRXU24 encryp...

ASA 5510 hanging on boot

When I power on our ASA 5510 it just hangs on "Launching BootLoader...".I've managed to get into ROMMON before it attempts to launch the bootloader and tried to restore an ASA image but it said disk0: failed to mount.I've copied the console output bu...

Resolved! Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

Affected Products Cisco IOS devices are vulnerable when running a software image of an affected version of Cisco IOS Software that does not support IKE version 2 (IKEv2) and is configured to use IKE version 1 (IKEv1). Vulnerable Products This vulnera...

Resolved! Simple Telnet question on ASA

On an ASA Firewall, I am using 8.4(5). Is Telnet disabled by default? I only want to use SSH from an inside interface which I know how to configure using the AAA command and establishing an RSA Modulus key.Thank youCarlos

Resolved! Upgrading from 8.4 to 9.1 issues (Transparent firewall)

Firewall is in transparent mode. At this time permit any any on trust to untrust and untrust to trust. It works great in 8.4; when I update the version to 9.1 it blocks all traffic yet nothing shows up in the monitoring mode. Downgrade to 8.4 and...

what type of of traffic need to be open between cucm 7.0 (publisher and subscribers)

There is a firewall that do not allow any traffic between a cucm 7.0 publisher and subscribers.Neet to know what need to be open so that all communication between them is working?

Resolved! Enabling the ASDM

Hello,I am just running up a new ASA and want to access the ADSM, but get this error what trying to access it from a web browser:ASA Version 8.4(2)!hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!inte...

Will NAT statements conflict?

I need to NAT the followinginside 172.2.1.1/25 to ouside 10.1.4.1/28I also have the 172.2.x.x range in another NAT statement that does a dynamic NAT for accessing the internet. Will these conflict?

Network Security

Forum Posts

Resolved! identical policy but with a different Lifetime

Resolved! ASA 5510 Software Upgrade Issues

Permit traffic from Inside to Outside, but not Inside to medium security interface

rv042 change wep security to wpa2

Traffic Other than ICMP does not Get Policy NATed

Firewall preventing Internet Access

ASA Identity Firewall CDA and Terminal Services

Connect Inside to Outside in ASA 5505

ASA 5510 hanging on boot

Resolved! Cisco IOS Software Internet Key Exchange Vulnerability Enquiry

Resolved! Simple Telnet question on ASA

Resolved! Upgrading from 8.4 to 9.1 issues (Transparent firewall)

what type of of traffic need to be open between cucm 7.0 (publisher and subscribers)

Resolved! Enabling the ASDM

Will NAT statements conflict?

FTD: Port translation is not performed on outside2 interface

Cloud Delivered FMC edit multiple interfaces

3130's Howto: configure network management-interface and shut / no sht

Correct way to config two external interfaces on the CSF 1210CE FTD

Secure Firewall 1200 HA topology with 03 ISP link´s and SD-WAN

Cisco SNS 3755

Upgrade FTD 2130

Cisco firepower 1150 multi ISP and Remote Access VPN

Smart License lost after Powerfail / Reboot

Firepower 1120 has wrong (falcon demo) license active