Hello!I have a 2801 that I am using ZBFW on and having issue getting DHCP. My policies are very simple, inspect from insidezone to outside and inspect on ports from outside to insidezone (for my port forwards). With no self zone policies in place I c...
on ASA 5505, I would like to allow all traffic for remote network(or servers)(harvesterFTP in a screenshot attached)for some reason it is not working. it seems it is with implicit rule.Could anyone give me some advice on this?
I'm new to using Cisco Networking products. I was given an assignment to determine if our enterprise 5510 and 5505 had IPS/IDS. In doing my research I discoververed that 5505 do not have IPS/IDS but you can purchase a card and 5510 have IPS/IDS modul...
hi,anyone knows why policy routing to a next hop ip address is not supported in asa ? will it be soon ? (i can only use route map with ospf metrics, there is no ip next hop command)Thank you
Hi allIm thinking of putting an IPS on my network, my question is what should the approach be to this, my thinking was to run it in monitor mode to get a baseline etc for a few weeks, then switch on inline mode.I hear there are different types of pro...
We received an ASA5520-K8 through Cisco's Loan program so we could demo it as a replacement for our aging Cisco 3005 VPN appliances. Given that we are a non Cisco shop (except for specific appliances like concentrators and wireless access points), I...
Hello folks -I am confiuring ZFW on a Cisco 2951 Router. The router has the following interfaces:TypeIP AddressUsePort Channel 1.510.218.4.197/30RTR-SW-Inband-MGMT VLANPort Channel 1.1010.218.4.1/26User VLANPort Channel 1.1510.218.4.65/26DB/Servers V...
Hello,I'm going to upgrade our ASA5525-X to the new 9.1(1) software which should support new ASA CX.Has anyone tried new version of software with Context-Aware? Do I need to buy licence to enable CX?Thanks and have a good day!
This is for an ASA 5505 with the base license...I have a situation where I will not have one interface in my outside VLAN, but instead I want to have interfaces 1-7 in my outside VLAN and interface0/0 in my inside VLAN.Is this supported with the Base...
I have an ASA configured with a server in our DMZ.It is currently configured to be accessed via the internet on port 80. That works.Now they want to initiate traffic from the DMZ to the internet. I thought the static NAT would keep the IP. Its act...
Hello guys,This is my first post so please forgive me if this has already been answered in the forum.I have a standard ASA 5505 with inside, dmz and outside with the default security levels, 100/50/0. we have an email server inside which has been NAT...
We moved the outside interface on an ASA5510 from a10/100 port to a 10/100/1000 port. The nameif and IP address from the old port were removed and added to the new port same security level. All the config that reference the nameif were added back...
Hi Experts,I have 20 MB flash available on FWSM and my configuration is huge.Now I am having problem in saving configuration.My understanding is that cf:4 is partition with 20MB, if this is true is it possible for me to do a repartition of the space ...
Hi,During the configuration dynamic filter I have error:dynamic-filter drop blacklist ^ERROR: % Invalid input detected at '^' marker.Show ver result:---Cisco Adaptive Security Appliance Software Version 8.2(1) Device Manager Version 6....
Can I have eight seperate firewall zones on a 5510 with only 4 ports, and using a Cat 2960 switch?I need to have inside, outside, DMZ-1, DMZ-2, DMZ-3, DMZ-4, DMZ-5 and DMZ-6.Can each zone have it's own security level and ACLs?Many thanks. ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 06-10-2026 02:18 PM | ||
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM |
