Is it possible to NAT an address within a subnet that does not have a corresponding interface (or loopback) on the device that is performing that NAT?Example:I want to NAT an address of a machine within a firewalled vlan on my FWSM like so:Upstream r...
Hello,We recently attempted an upgrade from 8.2.3 to 8.4.3 and one of the issues we experienced was an issue with traceroute through the firewall. Instead of the normal traceroute output, each hop is the same IP. But the traceroute completes succes...
Hi,I have this ACL on a cisco 3750 for allowing internal clients to access outside FTP servers, and I am concerned about the security hole that the last statement it might create:access-list 111 permit tcp 10.100.111.0 0.0.0.255 gt 1023 any eq ftpa...
Do you use a exclude command? aaa authentication? permit? or .....? not sure? port 21 is used for ftp and this is how the files will be sent to the remote server. So allow certain programs to access this port, that will be doing the backups? Or cr...
Hi ppl!Could you help me with DF bit.I looking how i can clean DF bit on my internal interfaces? Any help would be appreciated!
Hi Guys,Here is the scenario:Source (Inside) : 10.0.1.5/24 NAT IP: 10.0.1.25/24 (from the same Inside network)Destination, learnt via outside: 192.168.1.32/24 (not directly connected ,three hops away from outside interface of FW)If I initiate a conne...
Please help me,I am testing the Cisco ASA by nmap but cisco asa doesn't shun my ip.I have configured the threat detection as following:threat-detection rate dos-drop rate-interval 600 average-rate 100 burst-rate 400threat-detection rate dos-drop rate...
We are running asa ios 8.4 and would like to know if it possible to nat an outside addr at site A to an inside addr that is reached via mpls at site B?
Hi all.I am having some trouble accessing some backup Email (Outlook Web Access) and Citrix servers located behind an ASA 5505 firewall at a remote datacentre. Simply put, when I go to the specific URL (e.g. https://citrixdr.xxx.co.uk) I do not arriv...
Hi all, Is it possible to get some comparison table or document that highlights main advantage of using CX over normal ASAs ?
Hi Guys,While advertising network 0.0.0.0 0.0.0.0 in EIGRP on a Cisco ASA failover pair, got the error saying "ERROR: EIGRP cannot be enabled on failover interface". I am unable to configure failover interface as passive interface. Please guide me..I...
I am having some odd traceroute issues coming from clients behind my ASA5505.ASA Version: 9.1(1)ASDM Version: 7.1(1)52Firewall Mode: RoutedUsing ASDM I have modified the Rule Actions on the default service policy, to inspect ICMP. I have also added...
folksi've a strange process going onime can't connect to any of my sensors and when i run a packet capture it looks like its using an old proxy server i had configured some time agoi've checked that IE isn't configured for a proxy but can't find wher...
Hi Everyone,Need to know if default class inspection policy matches the incoming or outging traffic flowing through the ASA?Example when i ping from PC connecting to the ASA to outside world will then it will match icmp traffic entering the ASA th...
Hi,i want to ask it is cisco have a SOP about Firewall because i want to create SOP for my company.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-05-2026 09:59 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
| User | Count |
|---|---|
| 9 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
