Network Security

Cisco FWSM - How to check if packets are being dropped on a fwsm interface

Hi,I want to check whether packets are being dropped on a FWSM interface. How to do this? I was reading some Cisco documentation and the 'packets dropped' shown under the interface is not what I thought it meantInterface Vlan100 "backbone", is up, ...

Java - Unable to launch application

The problem: When I try to run ASDM on my Cisco 5550, I'm getting the dialog box "Unable to launch application". When I click on "Details", I see the error: "The application has requested a version of the JRE (1.5+) that is not installed". The system...

Resolved! Move it the NAT order in ASA

Hello,My NAT below is at #135, I'd like to move it up to #100 or which command would you move it up?myasa# sh nat | inc 192.168.1.15135 (inside) to (outside) source static obj-192.168.1.15 obj-78.123.123.15myasa#Thanks.

Resolved! https access from DMZ to Inside on ASA 5505

We have an ASA5505 UL bundel, updated with this license "L-ASA5505-SEC-PL=" to enable traffic from DMZ to Inside. No NAT or rules deployed for that yet.On the Inside we have Exchange 2007 in a single server installation. The public url for smtp, Acti...

PAT with HTTPS

Hi.A customer im working with has an internal server running on SSL port 443. Standard.They want connections to the public facing interface on a non standard port, port address translating through to 443.Its running 8.2(1)so will this work? the serve...

Resolved! ASA behavior

Hello people,so i am setting a lab up and i am trying to go a little deeper on ASA default behavior. As far as i know by default ASA has a default access list permitting Any IP traffic from higher to lower security level interface. Default global ins...

Resolved! Single Sign On AnyConnect ActiveDirectory

Hi,With AnyConnect client, is there a way to avoid having to issue the same Active Directory credentials twice:one to auth AnyConnectone to login to Active DirectoryThanks.

ASA 5505 switch from Mode: access Port to Trunk on the fly via CSM ?

HiCan I configure the Port at the ASA 5050 from Mode: access Port to trunk during the FW is running in a production area without console access ?As I know at the 5505 ist should work sincerley Alfred

restore CSM 4.2 DB to CSM 4.3 DB brand new system - failed

HiRestore CSM 4.2 DB to a brand new CSM 4.3 patch 1 failed I already tried 4 times backkups from the CSM 4.2 system to restore to the new CSM 4.3 patch 1 but all restores failed with : uncommitted data I read the install.guide about pending jobs a...

Resolved! PAT port range

Hi,I'm looking for a way to avoid doing 999 individual port address translations for ports in a range 1-999 for the same protocol. I'm not finding anything that asa code v9.11 will allow. I have the service objects defined but cannot find a way to ge...

Resolved! Can Cisco Configuration Professional to use IPS feature ?

Dear ExpertHello.Could you tell me about Cisco Configuration Professional. I'd like to try the IOS-IPS on Cisco2901-SEC/K9.I was search in CCO about Cisco Configuration Professional.The Cisco2901-SEC/K9 does not support SDM.But, The Cisco2901-SEC/K9 ...

Resolved! I can not acces to DMZ from vpn clients ASA 5505 v 9.1(1)

ASA Version 9.1(1) !xlate per-session deny tcp any4 any4xlate per-session deny tcp any4 any6xlate per-session deny tcp any6 any4xlate per-session deny tcp any6 any6xlate per-session deny udp any4 any4 eq domainxlate per-session deny udp any4 any6 eq ...

Resolved! Multiple VLANs and Gateways

Sorry for this question but my knowlege of switching and router is still growing.We have a HP Procurve 5412zl switch as our default gateway for all our VLANs from there the traffic will be going to a Cisco ASA 5515 and then to a Cisco 3800 Router t...

Cisco AnyConnect VPN Service not available

Hello Experts,I've been having a few problems with cisco's AnyConnect. Installing the package normally didn't work so I copied the installation files from a desktop where it worked successfully.Each time execute the application from the copied files ...

Resolved! Too many active services.

I have a website with very high hit rate which is protected by IPS. There've been complains about some dropped request so I've gone through IPS Event Viewer and I found many of this:evError: eventId=1321353761353146007 vendor=Cisco severity=error ...

Network Security

Forum Posts

Cisco FWSM - How to check if packets are being dropped on a fwsm interface

Java - Unable to launch application

Resolved! Move it the NAT order in ASA

Resolved! https access from DMZ to Inside on ASA 5505

PAT with HTTPS

Resolved! ASA behavior

Resolved! Single Sign On AnyConnect ActiveDirectory

ASA 5505 switch from Mode: access Port to Trunk on the fly via CSM ?

restore CSM 4.2 DB to CSM 4.3 DB brand new system - failed

Resolved! PAT port range

Resolved! Can Cisco Configuration Professional to use IPS feature ?

Resolved! I can not acces to DMZ from vpn clients ASA 5505 v 9.1(1)

Resolved! Multiple VLANs and Gateways

Cisco AnyConnect VPN Service not available

Resolved! Too many active services.

CSF 1210 CE FTD Event viewer problem

CSCwo71835 - The NAS-IP-Address attribute is missing

FMC API to get real time VPN/S2S tunnel and CPU/Memory perf metrics

Firepower 2130 -how to resolve plugin 70658 SSH Server CBC Mode Cipher

Yubikey for authentication to protected applications on FTD

SSH with X509v3 certificates

FPR‑4145 EOL/EOS ?

Firepower 4125 - how to resolve plugin 157288,

Cisco FMC QoS filtered by application

Disable checking of SIP traffic on FTD via FMC