Network Security

Resolved! ACL Hit Counts

ACL hit countsHi,I jsut needed to clarify something, i have a data Center & branch Office connected to each other through IPSec VPN. I also have SSL-VPn configured on the firewall in my data center, the same firewall on which the IPSec VPn from my br...

Resolved! Efficient way to organize ASA firewall access rules

Hello all - This is just a general question... is there a good way to organize the ASA's access rule list to increase its efficiency? Maybe by service or hit count (Top 10). I am using the Cisco ASDM 6.2 to manage our ASA 5520. Looking at it looks...

How to accept CUCM Voice/Video by ASA Anyconnect env

Dear Expert,We try to establishe P2P Video/Voice communication through AnyConnect VPN by using Jabber for iPad based on CUCM with CUP environment.Jabber ipad client can register to CUCM, and login through AnyConnect. Moreover and the jabbr client us...

Resolved! Cisco ASA with reload-framing - REsource LOcation And Discovery Framing

Hi,I have a problem with allowing this "RELOAD" framing through and ASA. I can get it working if I disable TCP-STATE checking.Can anyone confirm if this "protocol" is something that the ASA is capable of interpreting?I have attached some captures of ...

Resolved! Blocked Port 25: how to log?

Hi all, I am new to logging in the IOS. Fairly new to ZFW too, but have set up ZFW to block all internal sytsems from sending through port 25, except the mail server on the LAN. This is to help stop a spambot which I am trying to identify. As ty...

Firewall issue traffic

Hello,I have an issue with a firewall, there are servers and load balancer behind my firewall that need to reach a host in the internetthese are the rules:acl permit tcp X.X.X.X Y.Y.Y:Y 8406 (this works ) but using the IP not the hostname (in this c...

ping problem in asa

i want to ask about asa 5510 i connect the asa with two pc ( one act as inside and the other act outside ) and i configure the asa put the problem is .. i cant ping the inside pc from outside and vise versai tride many thing that i read in cisco webs...

Show env - ASA 8.2 ... where is it?

So the command reference says it should be there but I cant seem to find it on either 8.2 or 8.4. http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s3.html#wp1479191ASA5510# show environment ?ERROR: % Unrecognized commandThanks!

Can ping ASA outside interface, but cannot connect to other services on that interface

So I have a client with an ASA 5520 running version 9.0 (was on 8.4) that I am trying to get either IPSec or SSL VPN configured on. I got everything setup and tried to connect. However, I couldn't connect to either. I fired up the real time monito...

Resolved! Cisco ASA 5510, telnet to outside mx 587 doesn't work, no inspection for esmtp configured

Hi thereI can't telnet from a host(Ubuntu 12.10) in our DMZ to an outside MX on port TCP 587. Inspection for ESMTP not enabled. Port 587 enabled for host in DMZ to any.Anyone has an idea why ? Best RegardsDavid

Resolved! ASA 8.6 nat and access list for mail server

Trying to figure this all out. I'm getting untranslated hits. I posted the config I have so far.interface GigabitEthernet0/0 nameif outside security-level 0 ip address 10.1.1.1 255.255.255.0 !interface GigabitEthernet0/1 nameif inside security-level ...

Resolved! ASA 8.4 Object-Group, syntax query

HiI have:-!object-group network WEB_SITES network-object object www.123.de network-object object www.123.com network-object object www.123.eu network-object object www.123.fr network-object object www.123.nl network-object object www.123.be!sh run ob...

Query regarding DDOS Attacks

Hello all,I have attached a network diagram with this post. It shows a Cisco Catalyst 4500 to which we have connected our Datacenter customers an also our Back office LAN.What happened was that there was a DDOS attack towards Customer XYZ. It brought...

Cisco Ironport S160 / S170 Licensing

With the new changes in Cisco CCIE Security ver 4.0 lab requirements, we now require to procure as a Lab hardware a Cisco Ironport S160 / S170. I guess the BOQ is as follows:S170-BUN-R-NA Cisco IronPort S170, Standard Configuration production Unit 12...

ASA 8.4 portforwarding.

Hi all, I have an issue with portforwarding in my teleeye cctv behind asa 8.4.I can browse the DVR outside via http however when i attempt to login, "server busy" will prompt afterwards.Note: Theres no issue when acesssing the DVR locally.Heres my c...

Network Security

Forum Posts

Resolved! ACL Hit Counts

Resolved! Efficient way to organize ASA firewall access rules

How to accept CUCM Voice/Video by ASA Anyconnect env

Resolved! Cisco ASA with reload-framing - REsource LOcation And Discovery Framing

Resolved! Blocked Port 25: how to log?

Firewall issue traffic

ping problem in asa

Show env - ASA 8.2 ... where is it?

Can ping ASA outside interface, but cannot connect to other services on that interface

Resolved! Cisco ASA 5510, telnet to outside mx 587 doesn't work, no inspection for esmtp configured

Resolved! ASA 8.6 nat and access list for mail server

Resolved! ASA 8.4 Object-Group, syntax query

Query regarding DDOS Attacks

Cisco Ironport S160 / S170 Licensing

ASA 8.4 portforwarding.

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

FMC displays old release even if the patch installation was successful

FMC objects list - flipping through pages is difficult

same question, same issue, Intervlan routing not possible at FTD

Migrate from FMC virtual 300 to FMC virtual

FMC Connection Events Export

FTD 3105 : the disk /dev/nvme1n1 is unable to be unlocked or reverted

Stateful Firewall on Cisco Catalyst 9300 Series SwitchesStateful Firew

connetion events in FMC

Cisco FMC strong encryption license code

Cisco FMC 1000 Last Date of Support July 31, 2024