Network Security

Resolved! Packet Capture Destination IP on ASA

Hi All,For packet capture on ASA i have questions below to understand it betterIf i need to capture the packet on ASA then the destination IP can be any IP -- means IP of PC,Server,Router interface ,Switch interfaceAlso for destination IP the ASA ...

Resolved! Can ASA 5505 in Router Mode implement MAC ACL

Hi all :My client is asking can the Cisco ASA 5505 implement MAC ACL in Cisco ASA 5505 which is now running in Router Mode.Can anybody help to answer this?I have tried to search the document and also tried the ASDM in the Cisco ASA 5505 but could not...

Resolved! Concurrent connections in ASA

Hi Everyone,When we say that ASA 5505 supports 10k connections does it mean that we can have 10k connections to the different websites?Need to know what does connection refer to ?ThanksMahesh

Securing Internet Connection on Internet Gateway Router

Hi,I am looking for some suggestion as to how many different security features that should should be implemented on IOS based Internet Gateway Router. What are the different ways hackers attack, DoS attack, Worm Attack can be prevented on IOS routers...

locality in alerts not usable with CSM

Been a while since I've looked at this stuff, so hopefully I don't butcher the terminolgy too bad. Back in the old days, we defined event action filter variables and policies directly on an IPS sensor. These two items provided overlapping functiona...

How to configure active active Configuration

hI , i am looking for a active active solution design with the below desing .2 cisco asa in Site 1 in active /Standby mode 1 cisco asa in Site 2 Both the sites are connected on the private line .running all services from site 1 and o...

Tcp flags and timeout on ASA55XX 8.4(3)

I would like to understand someting about the behaviour of ASA with our traffic scenario and the management of tcp sessions.1) In particular we noticed that we have connections with the flags Fin without any acknowledgement. The session is silent (t...

Patch for alert 1203/0 IP Fragment Overwrite

I was unable to find the patches for the alert 1203/0 IP Fragment Overwrite.When i go to the site "Microsoft IP Fragment Reassembly Patches".I was unable to find patch for the Windows XP. If i go to the Windows NT4.0 Workstation i found out that the ...

ASA SSM From address

We use a Cisco ASA 5510 with SSM module.On the CSC Setup - Host/Notification settings menu it is possible to enter Notification settings.I filled in the administrator email addres but no messages can be send.Our spamfilter blocks the notification mes...

Recover the Password for ASA-SSM10

Dear All,Please help meI am Using Cisco ASA Firewall 5510 (7.2(4)) and ASA-SSM-10 Module(5.1(5)E1),I tried to use the command "hw-module module 1 password-reset"But its not working because of lower IOS Version. If there is another way to Recover th...

pki and ssh

Hi,I found documentation that ssh login should be able using x509 certificates. At least in NX-OS. But I did not find any documentation HOW this can be configured. Does anybody has a hint for me, where I can find more documentation about this? Is it ...

Resolved! IP SLA tracking with two destination

Hi,Is it possible to track two destination IP address via IP SLA in Cisco ASA 8.4?Below the current setup with configuration. I would like to add one more Public IP address(8.8.8.8) to track. in case both the destination IP address is not reachable t...

Resolved! (ASA 5510) How do assign multiple public IP addresses to outside interface?

Hi,I'm currently replacing my ASA 5505 with a 5510. I have a range of public IP addresses, one has been assigned to the outside interface by the setup wizard (e.g. 123.123.123.124 ) and another I would like to NAT to an internal server (e.g 192.168.0...

Resolved! dns inspect on ASA

HiI need to remove one host from dns inspection on ASA fw. Currently there is global policy with default inspection :class-map inspection_default match default-inspection-trafficpolicy-map type inspect dns preset_dns_map parameters message-length m...

ASA CIFS doesn't work for share folder on windows server 2008 R2

Hi,I am using ASA5520 with webvpn for file sharing. But recently we just upgraded the OS that accommodate file shared folder from win2003 R2 32bit to windows server 2008 R2 64bit. Now I have a problem with accessing file share by ASA webvpn, it appea...

Network Security

Forum Posts

Resolved! Packet Capture Destination IP on ASA

Resolved! Can ASA 5505 in Router Mode implement MAC ACL

Resolved! Concurrent connections in ASA

Securing Internet Connection on Internet Gateway Router

locality in alerts not usable with CSM

How to configure active active Configuration

Tcp flags and timeout on ASA55XX 8.4(3)

Patch for alert 1203/0 IP Fragment Overwrite

ASA SSM From address

Recover the Password for ASA-SSM10

pki and ssh

Resolved! IP SLA tracking with two destination

Resolved! (ASA 5510) How do assign multiple public IP addresses to outside interface?

Resolved! dns inspect on ASA

ASA CIFS doesn't work for share folder on windows server 2008 R2

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

FMC - Error mesasge: Unable to reach Cisco Cloud from the device

Configure DHCPRELAY Service using FTD REST API stead of FlexConnect

CISCO FXOS Upgrade - API

Hybrid Exchange/ SSL Decryption Error

FMC Unable to Join CSSM On-Prem

FPR 1120 reimage problem

Unable to SSH to FMC after enter some command line

Configuration save, retrieve; creating revision history

ASA Event Manager for S2S VPN Always Up

ASA: How to extract IKEv1 tunnel information from the configuration ?