Network Security

                   Hi all, this is my first post since I didn’t have to ask for help before.I'm experiencing a something weird with the new ASA 5545X. Here's the setup before I start. I have two switches and two ASA in active/standby as connected bel...

I try to SSH and get access denied.I try to ASDM and get "Unable to launch device manager from 172.16.252.100"I think I am missing something. Software is 8.4(5) and running in Transparent Mode.Inside/Outside are in bridge-group 1. No BVI is configure...

Just a quick question that I want to confirm.Customer has a ASA5540 at their main location and need a new ASA5500 for a DR site.Can I simply take a config file from an ASA5540 and easily drop it on an ASA5545-X or what ever?They are going to be using...

hello,I have a DNS name for the public ASA IPand I want use ASDM on the LAN with public DNS name or IP.With v8.2, I can use "alias", and it's Ok, but alias don't work on >8.4I try with "static" and DNS Doctoring.I can, but I loose access to the publi...

I have the system: Internal <--> Switch <---> Router cisco 2911 <---> ASA 5510 <---> ModemI built FTP server in internal, when i check FTP acccount in internal by IP FTP server -->okSo now i want to config FTP can access from internet. i have 1 IP st...

Hi!I need one DMZ server to access my inside network, but it does not work. I have made an access rule and the rule is working. Verified with packet tracer, packet tracer drops packet at the NAT step. The strange thing is that the NAT rule doesn't ge...

Hi there ... I'm a single ASA-5510 with CSC module ... I want to pair it for active/standby mode for failover .... can it be done if second ASA doesn't have the module? Can I assume the in case of a failover, the traffic won't be checked, and primary...

Hi there ... is there a process to swap licenses between ASA pairs?I've decomissioned a pair of ASA which have 50 Any-connect premium licenses. They will go to a lab now.My other pair of production ASAs have only 20 any-connect premium licenses (and ...

Hello All,  I've been tasked to manage an operation that is currently using a /24 mask on the internal interface of an ASA5510.  The current address pool is close to exhaustion so can I change the subnet mask to say a /22 on the internal interface wi...

I have a 5585 IPS-SSM20 that I need to deploy. I am trying configured IP logging but do not see the Time-Based Actions avaiable from teh Monitoring -> Sensor Monitoring section of the IDM. Is there something I need to configure?           

I just started trying to utilize object-groups on a C2901 router using  2900-universalk9-mz.SPA.150-1.M6.bin.  The issue I am having is trying to find the right show command to show the object-group acls listed with the ability to view incrementing m...

We have two non adjecent Class C Addresses from our ISP, we will call them 200.200.200.0/24 and 201.201.201.0/24. We started to Migrate from a PIX 515UR to an ASA5510 ( Software Version 8.3(2) ).The PIX was using the 200 Subnet, we then used the ASA ...

Hi Community,It has been a long time since i've worked CLI with Cisco and have just started a small business with a partner and dug out an old 871w to use at the office.After some time I got it working where Bridged Wireless and Wired are separated i...