Network Security

Resolved! CBAC and self-generated traffic (tftp)?

I am running CBAC on a 1811 running IOS 15.1 and can't figure out how to configure it so that I can preform TFTP upgrades with CBAC enabled. It appears that CBAC doesn't catch self-generated traffic and put in a reverse rule in the ACL. I am trying t...

Resolved! asa 5510 port channel

I have a ASA 5510, the inside addresses go to a 3750 as a channel group two interfaces on the asa are used. The channel group is setup as a trunk. I can ping the address from the direct connected switch connected switch however from another switch ...

cisco ACS 4.1 and cisco Firewall AAA Setting

Hi All,i have a cisco ASA5520 and i have configured the following to authentication from tacas server.aaa-server TACACS protocol tacacs+aaa-server TACACS (inside) host 172.z.z.1aaa authentication ssh console TACAS LOCALaaa authentication http console...

FWSM Maintenance Image - Cant communicate

All,I upgraded a FWSM from 3.2(13) to 3.2(23) and when it reloaded I got the dreaded "SCP dnld" failure, and the module powers down.IOS is 12.2(18)SXF11 on Sup 720-3BThinking this might be a corrupt flash or image, went into cf:1 after turning off di...

Resolved! Telnet from Outside switch to DMZ switch connected to ASA.

Hi all,I have switch b connected to ASA with fas0/40 under vlan 40.ASA connection to this switch is under Vlan 3 which is DMZ.OSPF is running between OSPF and DMZ switch.I was trying to telnet from Outside interface switch to DMZ switch which goes ...

ASA5505 - Blocking internal traffic between 2 servers

Hi guys/ladiesI have a cisco ASA5505, it runs a wide site to site VPN network and has 4 servers connected to it10.50.15.4 > fileserver10.50.15.5 > domain controller (exchange)10.50.15.6 > terminal server10.50.15.7 > terminal serverNow yesterday i rem...

Resolved! ASA 5505 Unable to assign ip to DMZ vlan interface

hi all,I have ASA 5505 with base license.I created 3rd vlan on it.it was created.but i am unable to assign IP to it.i assign ip address it takes it.But when i do sh int ip brief it does not show any ip.ciscoasa# sh int ip briefInterface ...

Resolved! user based content filtering on terminal server. can CSC handle this?

Hi all,Can CSC Trend Micro ASA module handle AD user/group based filtering on a multi-user server(eg. MS Terminal, Citrix)?Or is there another solution?Thank'sNorbertSent from Cisco Technical Support iPad App

Cisco CSC Web Filtering and Citrix\Ts users

Hello we need to buy a cisco CSC module for cisco ASA, and we're using Citrix Presentation server and Terminal Server Users, is CSC capable of ahtentitcate transparent the users in citrix (x users are using same IP)?, the CSC uses ntlm for this?, tha...

Resolved! Telnet to ASA from Nei Switch

Hi Everyone.I have ASA connected to Switch.This is outside connection.I was trying to Telnet to ASA from Switch which has outside connection to ASA.I config the commandtelnet 192.168.0.0 255.255.0.0 outsideStill from Switch i am unable to telnet to...

RDP through L2L problems.

Having a strange issue with RDP to an XP machine through a L2L tunnel.Tunnel is between an ASA5505 and ASA5510. Site A 5510, Site B 5505I have a handful of Win7 and XP Dev machines running on ESXi 4.1 within Site A.Site B to Site AI can RDP to all Se...

firewall creating loop in dmz

We have seen ( though very intermittently , once in 3-4 months) that interface utilization on the switches in DMZ touches almost 100%. Here is our rough topology:Netflow collector----firewall---DMZ---edge router(10.1.1.1) fw1 ...

ASA8.2(4) - permit IP option 7

How to configure ASA not to drop packets with ip option 7 (record route)? According to the docs, ip inspect ip option will drop all ip option packets except 0,1,and 20 (EOOL, NOP, or RTRALT):"If an IP header contains additional op...

Disappointed: ASA 8.4 Redundant using Port-channels

So I finally got all our ASAs upgrade to version 8.4 and was all sorts of excited to configure port-channels to our 6500 + SUP7203B switches. I was severally disappointed to discover that I cannot configure two port-channels and have them be members...

ASA5512-X power on after power fail

Hi,I have x2 ASA5512-X in a failover pair.I'm testing power on following power failure.Has anybody done this before?I have a delay of boot on a seemingly random chassis,often one powers up straight away, and the other follows later - but I can't fath...

Network Security

Forum Posts

Resolved! CBAC and self-generated traffic (tftp)?

Resolved! asa 5510 port channel

cisco ACS 4.1 and cisco Firewall AAA Setting

FWSM Maintenance Image - Cant communicate

Resolved! Telnet from Outside switch to DMZ switch connected to ASA.

ASA5505 - Blocking internal traffic between 2 servers

Resolved! ASA 5505 Unable to assign ip to DMZ vlan interface

Resolved! user based content filtering on terminal server. can CSC handle this?

Cisco CSC Web Filtering and Citrix\Ts users

Resolved! Telnet to ASA from Nei Switch

RDP through L2L problems.

firewall creating loop in dmz

ASA8.2(4) - permit IP option 7

Disappointed: ASA 8.4 Redundant using Port-channels

ASA5512-X power on after power fail

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Could not ssh to ASA after upgrading OS from 9.14.3.18 to version 9.1

Assigning an EtherChannel Subinterface to an Instance via FMC API

Secondary FMCv in HA - migration to new data center process

FTD OpenSSH < 9.8 RCE

Error in connection to Certificate Authority: status = FAIL

any EOS/L decided for 3140

ASA 1010 BGP SNMP OIDs

Firepower 1120 FTD Setup

Captive Portal doesn't work in FMC

Cisco ASA uninstalling SFR module