Dear All,I have Cisco ASA 5512-x and have 3 ISP. i don't know how to confiure on ASA 5512-x with muliple ISP. all 3 ISP i would like to active the same time.Could you advice or have some idea?Please help!!!Best Regards,Rechard
Installed ASA5520 the inside end one exchange server to assign it a fixed addresswithin the network, and static (inside, outside) of these servers is mapped to a public network IP (x.x.254.165), the domestic mail send and receive basicnormal, but abr...
Hi guys.I was wondering if anyone has any experience with the new 5512x firewalls and NAT egress interfaces.In the past I know it was possible using destination NAT to push traffic out of a specific interface; the example being where you have 2 ISP c...
Cannot telnet to port 25 to test for SMTP traffic. Packet trace indicates that the packet is dropped by the implicit rule, but I have tried an access rule specifically for SMTP, and the trace appears to skip the rule and drop the packet when it hits...
I have a couple users in my environment who have x64 Windows 7 computers and would like to use the VPN. The Cisco ISPEC VPN client doesn't support x64 and I haven't been able to convince management to shell out the cash for the ANYconnect SSL licens...
I have installed a new ASA5510 with CSC, and everything is working properly except the access to websites using https. All sites/access to them seem to be blocked by the ASA. I have read that this access is by default enabled and I have tried to add ...
What is the correct way to remove an IP address from one of the interfaces bound to a FWSM? I seem to recall reading a warning that executing the no ip address command would remove ALL IP addresses configured on the FWSM, however, I have not been abl...
I'm getting "SYN Timeout " message in my syslog when a user is trying to ssh to a server behind a firewall and getting denied. The hit count for the access-list is increasing every time he tries. The route and the translation are both configured. How...
Hi GuysIs it possible and if so, can you tell me how to log command entered by a user to go to a syslog server. Similarily to the archive command on ISO.Thanks in advanceNoel
We have a client who is about to hang an ASA off the DMZ of our firewall that is running 8.4(5). That firewall is currently on a different part of our network, and NAT is going to be significantly changed. Now, everything on the clients firewall need...
My active/standby failed over during a maintenance window last night and when I failed it back to my primary I noticed my standby unit went to a failed status:Other host: Secondary - FailedNamely because Interface dmz (192.168.254.253): Failed (Waiti...
Ok, I've searched through tens of documents and examples and googled for any possible clues, but for the life of me I can't see how "asr-group" command is actually needed in active/active failover. All examples say that return traffic could come back...
I do have one other question first. What's the effect of the crypto key zeroize rsa command, and then crypto key generate rsa modulus 1024 while I'm SSH'd to the ASA? Can I do it? Or do i need to be consoled in or connected a different way?OK, it'...
Hello,I am trying to find out the best path to upgrade to two ASA 5510 running 9.0 (1). I know there are changes in the new version.Let me know what information you need and i will post.Thanks,
Hi Everyone.Our client would like to buy an deploy an IPS solution in the nearest future. The IPS should scan the traffic aprox. at speed of 400-600 Mb/s on Internet Edge. In Cisco Commerce Workspace I've found an information that 4255 sensor will be...
