Hello,Just wondered if anyone else had successfully blocked DNS tunnels (such as NSTX or iodine) from working via DNS inspection on ASA 8.3 or newer?Whilst there is a wealth of information on how to set these up to bypass security restrictions, there...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(2) -
APIs
(1) -
Appliances
(17) -
ASA
(1) -
Branch Router
(1) -
Buying Recommendation
(81) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,335) -
Cisco Bugs
(60) -
Cisco Cafe
(15) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(139) -
Cisco Firepower Device Manager (FDM)
(768) -
Cisco Firepower Management Center (FMC)
(2,700) -
Cisco Firepower Threat Defense (FTD)
(2,986) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(55) -
Cisco Secure Firewall Management Center (FMC)
(275) -
Cisco Secure Firewall Threat Defense (FTD)
(329) -
Cisco Security Cloud Control
(17) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(20) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(45) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(2) -
Community Bug or Issue
(1) -
Community Feedback Forum
(26) -
Community Ideas
(12) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(238) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(14) -
Firepower Management Center (FMC)
(383) -
Firepower Threat Defense (FTD)
(206) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,051) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(8) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,519) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(6) -
License
(307) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(87) -
Network Security
(2) -
NFVIS
(1) -
NGFW Firewalls
(37,234) -
NGIPS
(1,794) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(3) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,660) -
Other Networking
(9) -
Other Routers
(8) -
Other Routing
(22) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Physical Security
(19) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(1) -
Room Endpoints
(1) -
Routing Protocols
(8) -
SD-WAN Security
(1) -
Security
(4) -
Security Management
(565) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(27) -
VPN and AnyConnect
(1) -
Vulnerability Management
(43) -
WAN
(7) -
Web Security
(4) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hi,I need to configure ASA with Radius server which is behind VPN established between this ASA and remote firewall. Is it possible?I've tried so far:1) add outside IP into cryptomaps each end2) NAT outside IP to internal lan range (one defined in cry...
Resolved! Port fowarding using ASA 5510
Hi all,eth0/0 = 60.54.x.x internal server IP = 172.47.1.10I have a ASA 5510. I want to access the internal server IP through the ASA via http://60.54.x.x:8080/sms/DnNotify ( via port 8080).How do i configure it? NAT? ACL? configure port?
Hi,I want to access my ASA 5505 from internet.Please let me know, how I can achive it.Regards,Milan Verma
Hi,Kindly share ke commands for configuring ssh & telnet on ASA 5505Regards,Milan Verma
Hi everyone.At some moment on the FWSM we have these logs: Pre-allocate SIP Via UDP secondary channel for outside:127.0.0.1/5175 to UP_direct:IP-ADD from REGISTER messageCan anyone say what does it mean? Why the source add is 127.0.0.1?Thx.
I have a server in a network DMZ (IP 192.168.40.43) need to do discovery of other IP address to update the IPAM tool. It should not be done source NAT so I´m trying to use the configuration below with Policy NAT but isn´t working:nameif ethernet1 ins...
I have setup QOS using an ACL with policing to a certain bandwidth.That is working fine.But when a data transfer is happening that is getting QOS'd/policed I get these messages in the log: %ASA-4-733100: [ Port-8191-65535] drop rate-1 exceeded. Cu...
Hi,Can anyone suggest some options to gather traffic flow information for a network to build new firewall rules. Some applications have been running for long time and people who set it up have moved. The Netflow data is huge. I am only interested in...
Resolved! Is SSH port 22 both directions?
It is amazing how hard it is to find an answer to this question. Even searching for "port" and "22" in the various RFC's for SSH didn't give me an answer. I am trying to find out is if SSH sends on port 22 from the SSH client. I know the SSH serve...
Scenario 1On new firewall following inspect command are as follows.Assume there is no access-list on firewall..so now all the traffic related to below protocols will be allowed to flow from inside to outside as well as outside to inside. inspect dns...
Resolved! NAT Address range different to Public
HiWe have a new ASA box in place with a Private, DMZ and Public card which routes out to the Internet fine and everything is currently working as it should.I am trying to setup the NAT part, yet the range we have been given is on a different subnet t...
Dear all,i have a problem with my asa phone proxyi have two ASA 5520 in HA. I have 10 phone register with ASA active primary.if i execute the command show phone-proxy secure-sessioni can see the phone session on the ASA.if i perform the same co...
Referring to the diagram, Switch_2 was not there and communication between private networks was working fine. I added Switch_2 (a layer 2 switch) to the network to extend the business network and lost communication in Site_2 private network. We have ...
Hello all,I'm receiving this flood line like below in my log, look:Dec 3 16:05:00 10.11.2.2 %ASA-6-106015: Deny TCP (no connection) from 172.19.2.50/54429 to 10.11.5.20/5666 flags PSH ACK on interface inside When I'm in 172.19.2.5...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 09-24-2026 02:14 AM | ||
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
