Network Security

HiI want to  make ipsec vpn between ASA and Cisco 877 Router,crypto isakmp and crypto ipsec ACTIVE state its works fine but Cisco 877 can not ping ASA internet interface but can ping behind ASA PC,PC can ping 192.168.2.1 but Cisco877 can ping only be...

Is anyone else seeing a high frequence of "Cisco ASA 1000v Cloud Firewall H.323 Inspection Denial of Service" signature firing in their environment?  We are seeing this on several of the customer that we manage.Jon.

                   Hi all, this is my first post since I didn’t have to ask for help before.I'm experiencing a something weird with the new ASA 5545X. Here's the setup before I start. I have two switches and two ASA in active/standby as connected bel...

I try to SSH and get access denied.I try to ASDM and get "Unable to launch device manager from 172.16.252.100"I think I am missing something. Software is 8.4(5) and running in Transparent Mode.Inside/Outside are in bridge-group 1. No BVI is configure...

Just a quick question that I want to confirm.Customer has a ASA5540 at their main location and need a new ASA5500 for a DR site.Can I simply take a config file from an ASA5540 and easily drop it on an ASA5545-X or what ever?They are going to be using...

hello,I have a DNS name for the public ASA IPand I want use ASDM on the LAN with public DNS name or IP.With v8.2, I can use "alias", and it's Ok, but alias don't work on >8.4I try with "static" and DNS Doctoring.I can, but I loose access to the publi...

I have the system: Internal <--> Switch <---> Router cisco 2911 <---> ASA 5510 <---> ModemI built FTP server in internal, when i check FTP acccount in internal by IP FTP server -->okSo now i want to config FTP can access from internet. i have 1 IP st...

Hi!I need one DMZ server to access my inside network, but it does not work. I have made an access rule and the rule is working. Verified with packet tracer, packet tracer drops packet at the NAT step. The strange thing is that the NAT rule doesn't ge...

Hi there ... I'm a single ASA-5510 with CSC module ... I want to pair it for active/standby mode for failover .... can it be done if second ASA doesn't have the module? Can I assume the in case of a failover, the traffic won't be checked, and primary...

Hi there ... is there a process to swap licenses between ASA pairs?I've decomissioned a pair of ASA which have 50 Any-connect premium licenses. They will go to a lab now.My other pair of production ASAs have only 20 any-connect premium licenses (and ...

Hello All,  I've been tasked to manage an operation that is currently using a /24 mask on the internal interface of an ASA5510.  The current address pool is close to exhaustion so can I change the subnet mask to say a /22 on the internal interface wi...

I have a 5585 IPS-SSM20 that I need to deploy. I am trying configured IP logging but do not see the Time-Based Actions avaiable from teh Monitoring -> Sensor Monitoring section of the IDM. Is there something I need to configure?           

I just started trying to utilize object-groups on a C2901 router using  2900-universalk9-mz.SPA.150-1.M6.bin.  The issue I am having is trying to find the right show command to show the object-group acls listed with the ability to view incrementing m...