Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Packet flow in 8.4 ios explain

I think packet flow is changed in 8.3 IOS and above.We are using private NAT for ouside traffic.can any body explain me why we are using private IP for outside traffic

'global address overlaps with mask'

static (inside,outside) <global ip> <local ip> netmask <local ip netmask>When I enter the above in my pix 501 (mind that whats in the <> is an ip address) I get an error message that says 'global address overlaps with mask'Any ideas?

Resolved! nat (inside) 0 access-list NoNAT_inside

Can someone Explain what the following does on my PIX firewallnat (inside) 0 access-list NoNat_Insideaccess-list NoNat_Inside line 1 permit ip lan 255.255.0.0 dmz 255.255.255.0Lan = 10.10.0.0DMZ= 172.172.172.0I'm am under the impression it denies the...

I need to DMZ access to internet and see the inside on ASA 5520

Hi everyone.I am new in ASA, I have the DMZ (10.1.1.0/24) configured on ASA 5520 and I achieve the reach Internet from DMZ (10.1.1.0/24), but now need reach DMZ from inside (172.16.12.0/24) and inside (172.16.12.0/24) from DMZ (10.1.1.0/24), in othe...

Resolved! Cisco ASA 8.6 -> EIGRP not working

Hi!We have 2 ASA5510 and 2 ASA5525. Got a very weird error; up to release 8.4 eigrp works fine, after upgrading to 8.6 eigrp stops working.If i do 'sh ei nei' i get this after upgrade to 8.6:GRPCPDFW01# sh ei neighbors deEIGRP-IPv4 neighbors for proc...

dhcpfailover setroute: what is it used for, it works without using this

We use multiple context mode on FWSM and dhcp relay but never configured setroute and it works.Does anybody know when to use this feature under what circumstances?**********************Step 4 (Optional) To change the first default router address in t...

NAC Guest Server - hard coding the sms country code

Hi all,We have a NAC guest server in our environment which we use to add trusted guest wireless users to our network. We successfully use the Email user facility and wev'e now successfully got the SMS part working too. Is it possible however to 'hard...

Resolved! DMZ to other DMZ cannot discuss

Hi, I try to find a solution but got some problem ... I got Two DMZ, one name "Dmz" and other "service" I can have the same security level but not a problem. I want that traffic from Dmz to service works in some TCP port to some IP and from ...

ASA 5510 Tutorials?

Does anyone know of a good tutorial video or site for the ASA 5510s? I'm specifically looking for something on how to get around the GUI; adding rules, etc. Thanks,Steve

FWSM 10 Gig performance issues

Hi all,Our customer is experimenting really bad performance when runing 10Gig traffic through FWSM on C6509. Test with1 Gig traffic are providing find result perfromance as expected in this document: https://supportforums.cisco.com/docs/DOC-12668. I ...

Resolved! 802.1q with ISR IOS firewall

HiMy basic query is whether a dot1q trunk carrying 2 VLANs (guest wireless and corporate LAN) can still be firewalled using the zone based firewall on an IOS firewall on a 1941 ISR. Here's more background:It's for a number of branch sites that will h...

Resolved! Outside with multiple IP public

Hi I am Jonathan Rivero and I am NEW on ASAs, I have ASA 5520 with Version 8.2(5), the ISP give me a block of IP pubic (201.148.156.193/28), one IP valid (201.148.156.194) have the Global NAT (all users LAN) and server FTP, but i n...

Resolved! Access list help

Background:This is my 1st time working with the post 8.4 IOS on the ASA and have a question regarding access lists. My ASA is running ver 8.6 and is configured with 3 interfaces, inside, data and outside. The inside network is for management\monit...

Can PING/ASDM/SSH to External IP but not to Internal IP on PIX itself

We have two networks HQ and Site1 and for some reason we can’t ping the inside IP for Site1 PIX device. We have site-site-VPN set up between the two and everything works fine except we can’t ping the Site1 PIX from internal IP. However, I can ASDM/SS...

portmap translation creation failed for udp

Hi,I am getting below error frequently, can anyone suggest me what could be the done to eleminate the error..? %asa-3-305006: portmap translation creation failed for udp src INT1:10.64.54.154/56706 dst INT2:10.0.1.3/8612 Best Regards,Siraj

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Packet flow in 8.4 ios explain

'global address overlaps with mask'

Resolved! nat (inside) 0 access-list NoNAT_inside

I need to DMZ access to internet and see the inside on ASA 5520

Resolved! Cisco ASA 8.6 -> EIGRP not working

dhcpfailover setroute: what is it used for, it works without using this

NAC Guest Server - hard coding the sms country code

Resolved! DMZ to other DMZ cannot discuss

ASA 5510 Tutorials?

FWSM 10 Gig performance issues

Resolved! 802.1q with ISR IOS firewall

Resolved! Outside with multiple IP public

Resolved! Access list help

Can PING/ASDM/SSH to External IP but not to Internal IP on PIX itself

portmap translation creation failed for udp

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Cisco router IPSEC tunnel to AWS with Star Link help

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Cisco FTD workaround for SSE connector failure stumbled on rights priv

EU compliance certificate Firepower 1010 NGFW

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC

Hyper-V VHD image for FMC virtual

Cisco Packet Tracer ASA 5506 Prevents Access to DMZ Servers