Network Security

Resolved! Question about configuration of NAT on ASA

Hi all,I have ASA config with DHCP and its providing IP to users.ASA is connected to 3550 switch it has direct connection or say default static routeFrom 3550 switch connection goes to Router and it does the NAT and has connection to outside world...

Resolved! Packet Capture Destination IP on ASA

Hi All,For packet capture on ASA i have questions below to understand it betterIf i need to capture the packet on ASA then the destination IP can be any IP -- means IP of PC,Server,Router interface ,Switch interfaceAlso for destination IP the ASA ...

Resolved! Can ASA 5505 in Router Mode implement MAC ACL

Hi all :My client is asking can the Cisco ASA 5505 implement MAC ACL in Cisco ASA 5505 which is now running in Router Mode.Can anybody help to answer this?I have tried to search the document and also tried the ASDM in the Cisco ASA 5505 but could not...

Resolved! Concurrent connections in ASA

Hi Everyone,When we say that ASA 5505 supports 10k connections does it mean that we can have 10k connections to the different websites?Need to know what does connection refer to ?ThanksMahesh

Securing Internet Connection on Internet Gateway Router

Hi,I am looking for some suggestion as to how many different security features that should should be implemented on IOS based Internet Gateway Router. What are the different ways hackers attack, DoS attack, Worm Attack can be prevented on IOS routers...

locality in alerts not usable with CSM

Been a while since I've looked at this stuff, so hopefully I don't butcher the terminolgy too bad. Back in the old days, we defined event action filter variables and policies directly on an IPS sensor. These two items provided overlapping functiona...

How to configure active active Configuration

hI , i am looking for a active active solution design with the below desing .2 cisco asa in Site 1 in active /Standby mode 1 cisco asa in Site 2 Both the sites are connected on the private line .running all services from site 1 and o...

Tcp flags and timeout on ASA55XX 8.4(3)

I would like to understand someting about the behaviour of ASA with our traffic scenario and the management of tcp sessions.1) In particular we noticed that we have connections with the flags Fin without any acknowledgement. The session is silent (t...

Patch for alert 1203/0 IP Fragment Overwrite

I was unable to find the patches for the alert 1203/0 IP Fragment Overwrite.When i go to the site "Microsoft IP Fragment Reassembly Patches".I was unable to find patch for the Windows XP. If i go to the Windows NT4.0 Workstation i found out that the ...

ASA SSM From address

We use a Cisco ASA 5510 with SSM module.On the CSC Setup - Host/Notification settings menu it is possible to enter Notification settings.I filled in the administrator email addres but no messages can be send.Our spamfilter blocks the notification mes...

Recover the Password for ASA-SSM10

Dear All,Please help meI am Using Cisco ASA Firewall 5510 (7.2(4)) and ASA-SSM-10 Module(5.1(5)E1),I tried to use the command "hw-module module 1 password-reset"But its not working because of lower IOS Version. If there is another way to Recover th...

pki and ssh

Hi,I found documentation that ssh login should be able using x509 certificates. At least in NX-OS. But I did not find any documentation HOW this can be configured. Does anybody has a hint for me, where I can find more documentation about this? Is it ...

Resolved! IP SLA tracking with two destination

Hi,Is it possible to track two destination IP address via IP SLA in Cisco ASA 8.4?Below the current setup with configuration. I would like to add one more Public IP address(8.8.8.8) to track. in case both the destination IP address is not reachable t...

Resolved! (ASA 5510) How do assign multiple public IP addresses to outside interface?

Hi,I'm currently replacing my ASA 5505 with a 5510. I have a range of public IP addresses, one has been assigned to the outside interface by the setup wizard (e.g. 123.123.123.124 ) and another I would like to NAT to an internal server (e.g 192.168.0...

Resolved! dns inspect on ASA

HiI need to remove one host from dns inspection on ASA fw. Currently there is global policy with default inspection :class-map inspection_default match default-inspection-trafficpolicy-map type inspect dns preset_dns_map parameters message-length m...

Network Security

Forum Posts

Resolved! Question about configuration of NAT on ASA

Resolved! Packet Capture Destination IP on ASA

Resolved! Can ASA 5505 in Router Mode implement MAC ACL

Resolved! Concurrent connections in ASA

Securing Internet Connection on Internet Gateway Router

locality in alerts not usable with CSM

How to configure active active Configuration

Tcp flags and timeout on ASA55XX 8.4(3)

Patch for alert 1203/0 IP Fragment Overwrite

ASA SSM From address

Recover the Password for ASA-SSM10

pki and ssh

Resolved! IP SLA tracking with two destination

Resolved! (ASA 5510) How do assign multiple public IP addresses to outside interface?

Resolved! dns inspect on ASA

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

Knowledge Hub: Cisco Technology for Securing the Enterprise

Announcing Resources That Guide You to Success

FDM UI/SSH timing out time to time

cisco 2100 FMC setup questions

configure SNMP inform retry and duration on FMC

FMC doesn't show all SGTs in Connection Log and Unified Events

exercicio

FTD management interface not coming up after reimaging from ASA to FTD

Firepower 2120: 'configure user delete' causes 'Invalid target user'

Convert ASA from Multiple Context to Single Mode

FMC S2S route-based VPN - full mesh not available

Filter ASDM syslog messages by IP address