Network Security

Resolved! asa 5510 port channel

I have a ASA 5510, the inside addresses go to a 3750 as a channel group two interfaces on the asa are used. The channel group is setup as a trunk. I can ping the address from the direct connected switch connected switch however from another switch ...

cisco ACS 4.1 and cisco Firewall AAA Setting

Hi All,i have a cisco ASA5520 and i have configured the following to authentication from tacas server.aaa-server TACACS protocol tacacs+aaa-server TACACS (inside) host 172.z.z.1aaa authentication ssh console TACAS LOCALaaa authentication http console...

FWSM Maintenance Image - Cant communicate

All,I upgraded a FWSM from 3.2(13) to 3.2(23) and when it reloaded I got the dreaded "SCP dnld" failure, and the module powers down.IOS is 12.2(18)SXF11 on Sup 720-3BThinking this might be a corrupt flash or image, went into cf:1 after turning off di...

Resolved! Telnet from Outside switch to DMZ switch connected to ASA.

Hi all,I have switch b connected to ASA with fas0/40 under vlan 40.ASA connection to this switch is under Vlan 3 which is DMZ.OSPF is running between OSPF and DMZ switch.I was trying to telnet from Outside interface switch to DMZ switch which goes ...

ASA5505 - Blocking internal traffic between 2 servers

Hi guys/ladiesI have a cisco ASA5505, it runs a wide site to site VPN network and has 4 servers connected to it10.50.15.4 > fileserver10.50.15.5 > domain controller (exchange)10.50.15.6 > terminal server10.50.15.7 > terminal serverNow yesterday i rem...

Resolved! ASA 5505 Unable to assign ip to DMZ vlan interface

hi all,I have ASA 5505 with base license.I created 3rd vlan on it.it was created.but i am unable to assign IP to it.i assign ip address it takes it.But when i do sh int ip brief it does not show any ip.ciscoasa# sh int ip briefInterface ...

Resolved! user based content filtering on terminal server. can CSC handle this?

Hi all,Can CSC Trend Micro ASA module handle AD user/group based filtering on a multi-user server(eg. MS Terminal, Citrix)?Or is there another solution?Thank'sNorbertSent from Cisco Technical Support iPad App

Cisco CSC Web Filtering and Citrix\Ts users

Hello we need to buy a cisco CSC module for cisco ASA, and we're using Citrix Presentation server and Terminal Server Users, is CSC capable of ahtentitcate transparent the users in citrix (x users are using same IP)?, the CSC uses ntlm for this?, tha...

Resolved! Telnet to ASA from Nei Switch

Hi Everyone.I have ASA connected to Switch.This is outside connection.I was trying to Telnet to ASA from Switch which has outside connection to ASA.I config the commandtelnet 192.168.0.0 255.255.0.0 outsideStill from Switch i am unable to telnet to...

RDP through L2L problems.

Having a strange issue with RDP to an XP machine through a L2L tunnel.Tunnel is between an ASA5505 and ASA5510. Site A 5510, Site B 5505I have a handful of Win7 and XP Dev machines running on ESXi 4.1 within Site A.Site B to Site AI can RDP to all Se...

firewall creating loop in dmz

We have seen ( though very intermittently , once in 3-4 months) that interface utilization on the switches in DMZ touches almost 100%. Here is our rough topology:Netflow collector----firewall---DMZ---edge router(10.1.1.1) fw1 ...

ASA8.2(4) - permit IP option 7

How to configure ASA not to drop packets with ip option 7 (record route)? According to the docs, ip inspect ip option will drop all ip option packets except 0,1,and 20 (EOOL, NOP, or RTRALT):"If an IP header contains additional op...

Disappointed: ASA 8.4 Redundant using Port-channels

So I finally got all our ASAs upgrade to version 8.4 and was all sorts of excited to configure port-channels to our 6500 + SUP7203B switches. I was severally disappointed to discover that I cannot configure two port-channels and have them be members...

ASA5512-X power on after power fail

Hi,I have x2 ASA5512-X in a failover pair.I'm testing power on following power failure.Has anybody done this before?I have a delay of boot on a seemingly random chassis,often one powers up straight away, and the other follows later - but I can't fath...

Resolved! icmp deny any inside on ASA

Hi Everyone,I applied this on ASAicmp deny any insideAfter applying this1>From ASA i can ping the inside interface IPciscoasa# ping 192.168.1.1 *********************************************************************************************Inside Inter...

Network Security

Forum Posts

Resolved! asa 5510 port channel

cisco ACS 4.1 and cisco Firewall AAA Setting

FWSM Maintenance Image - Cant communicate

Resolved! Telnet from Outside switch to DMZ switch connected to ASA.

ASA5505 - Blocking internal traffic between 2 servers

Resolved! ASA 5505 Unable to assign ip to DMZ vlan interface

Resolved! user based content filtering on terminal server. can CSC handle this?

Cisco CSC Web Filtering and Citrix\Ts users

Resolved! Telnet to ASA from Nei Switch

RDP through L2L problems.

firewall creating loop in dmz

ASA8.2(4) - permit IP option 7

Disappointed: ASA 8.4 Redundant using Port-channels

ASA5512-X power on after power fail

Resolved! icmp deny any inside on ASA

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

cannot get to privileged enable mode via console

FMCv 7.2.5.1: High CPU load - how to troubleshoot?

Cisco FTD Migration from 4100 to 4245

My CSLU(Cisco Smart License Utility) can't login into Cisco.

same question, same issue, Intervlan routing not possible at FTD

FTD and FMC backup creating a sf-storage folder

Route Based VPN FTD

Multi instance 3120 FTD - Each instance in different FMC Domain

FDM DHCP Relay

Need expert help with Firepower intervlan routing