Hello Experts, We have recently installed new 5525 8.6(1) ASA's. Our setup is like; where wer are using Public IP for web server, which needs to be mapped/natted to internet VIP address and that VIP is configured on F5 LB. Setup i...
Hello,is it possible to disable the ipv6 Access-List-Rules in ASDM? I have about ten interfaces, that are all double-displayed with an ipv6 implicit deny rule. I don't need this rules and it is a very confusing view of all access rules with the unnee...
Dear all,We have a old Cisco ASA5540 firewall running on firmware version 7.0 and also a Firewall Service Module (FSWM) running on firmware version 2.3.My question is if I would like to upgrade the Cisco ASA5540 firmware version to 7.1 above and the ...
HiIn order to mitigate syn-floods, syn-cookies are usefull tools, but I wonder how the count is.F.ex if this security police from the configuration guide is applied to the outside interface:hostname(config)# class-map CONNS hostname(config-cmap)# mat...
HelloWe currently use old ASA-5520 which we replace with brand new ASA-5585-X. The 5520 is currently running 8.2.x and the target on the 5585-x should be 8.4(5).6. We use quite a bit of NAT, mostly with dynamic rules (assign a pool of external addres...
Hi, I have a 5510 with security plus on 7.2(3) and I am looking to pick up an economical 2nd unit on eBay to configure as an HA pair A/S. Of course there are quite a few on offer, and the one I am looking at matches fairly closely. My question for th...
Hi all,We are in the process of migrating our old proxy server with an Ironport appliance. The Ironport device is located in the inside interface of the firewall.The configuration is the following:wccp 90 redirect-list HTTP-FILTER-ACLwccp 120 redirec...
Hello all,I'd like to ask all of you a question about configuring WCCP on an ASA5520.I'll try to explain the situation the best I can.We have a Cisco Ironport that is working as Explicit proxy and we want to migrate it to Transparent mode.We'll chang...
I've setup site2site and remote cisco vpn clients to terminate full (not split) vpn tunnels on our ASA5520. Does anyone know if the ASA can do IPS inspection and web url-redirection to an external content filter server (e.g. Websense server or WCCP t...
hello,Can Any1 tell me what is the ram of ASA Service Module?Thanks in advance Khem
Hi,The question is am I able to run dhcprelay for two separate networks?config like this:dhcprelay server xxx.xxx.xxx.xxx INT1dhcprelay server xxx.xxx.xxx.xxx INT2dhcprelay enable insidedhcprelay enable dmz1dhcprelay timeout 60Thanks in adviceMarcin
HelloIs there anyone that face this recent vulnerability?http://tools.cisco.com/security/center/viewAlert.x?alertId=27927http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtc59462My understanding is that...
Hello, We recently attempted an upgrade from 7.2.4 to 8.4.5 and one of the issues we experienced was an issue with BT download can't through the firewall. Such as uTorrent(ver 3.3) .When open the software ，it display that DHT waiting to login in.But ...
Hi all,I have an Interface that is up/up but "show fail" reports "no link"Any ideas on what the cause may be? I am seeing input errors on the switch port this interface is connected to. Tried swapping the cable, but no change. I may have a hardware p...
Hello , i'm testing IOS firewall using zone based firewall zone pairs , users can access the internet , but i have a problem that i can't ping my external dns servers or even ping , trace any internet destination. For example ping to www.yahoo.com fa...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM | ||
| 06-24-2026 08:00 AM | ||
| 05-26-2026 07:54 AM |
| User | Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
