Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Problems with NAT ASA 8.4(2)

hello,I have a ASA5520 with 4 Portchannel interfaces and ASA Version 8.4.(2). There are many vlan interfaces but in the DMZ I have one Server who has a Static NAT to all other interfaces. original (security 50) DMZ 10.226.224.25 translatet (securit...

Resolved! asa with websense, undocumented error message?

I have an ASA 5505 and have it configured to use Websense for content filtering. I am seeing this message while connected to my console port: websense lookup resp message overflowI cannot find any documentation explaining this message anywhere. Th...

Resolved! NAT: Passive FTP with non standard port

Hi all, I have an ASA 5515 and four FTP server. Currently I have everything configured properly for three of the server that I need. For the fourth I have two possibilities: 1) use the IP configured for the external interface. 2) use one of the ip us...

5505 - netflow style data??

I need to know if I can pull Netflow style data (Top Talkers, Top Sessions, etc) from ASA 5505s? We are looking at buying some but I need to be able to export this kind of data to my managment station which is also a collector. I have read on this f...

ASA 5505 unresponsive remote management

Anyone else experience unresponsive / lockups with Cisco ASA 5505 remote management ? I think it happens like this: 1) With ASDM (Java Web Start), add new crypto map (it could be anything, just happens to be what i added the last time this happened)...

Resolved! Cut-through/direct authentication connection being denied

I'm trying to set up a firewall so an outside user can authenticate to the firewall, then RDP directly to a workstation.Here's what I've got:aaa authentication match authmatch outside LOCALaaa authentication listener http outside port 5555 access-lis...

Configure ACS 5.3 to Assign a Group Policy at Login using RADIUS

how i do configure acs 5.3 to assign a group policy at login using radius?

Fan direction in ASA's

Hi,I'm using a couple of ASA5510's since a few years in a few datacenters, and I wonder about the following:Usually the ASA's are positioned with the connectors facing to the back of the 19" cabinets, so one can easily connect the device to other net...

what is reason for not working even phase 1 of the vpn?

i have router 3845 and then it's connected with pix and then its connected with vpn tunnel to the customer router. i am here trying to make vpn connectivity for devices. so on router i did static nat statements 10.124.90.124 10.200.200.1. this type o...

Resolved! ASA 5510 NAT Question

Just upgraded my ASA 5510 from 8.2(1) to 8.4(4)1. Everything appeared to work just fine with one big exception.The NAT statements I had previously remained in effect and even appeared to replicate in some instances.My issue now is I have set up a DM...

ASA Failover issue

Hi,I have configured Cisco ASA in Active/Standby mode. This firewall has been in production for more than 2 years and recently, there was a issue where both firewall went down. The reason was IFC Failure which was showing in show failover state and s...

ASA Config Question (Weird)

This is hard to explain but here I go -At our Colo in TX we have a Cisco PIX I am upgrading to a Cisco ASA5520. Here is what I need help with. Since NAT commands have change in the new version, 8.4.4.1 I want to run the old-pix and the new-asa5520 in...

Resolved! Cisco ASA Version 8.4(3): VPN Passthrough Problem with NCP Client

Hello Support Community,I have a problem with VPN Passthrough with a NCP Client and Cisco ASA 5520 Version 8.4(3)A VPN IPSec Connection with a Cisco VPN Client through the Cisco ASA works fine.The NCP Client establish a connection with Source and Des...

Priority Queue Question

I've added the following config to the ASA at one of my remote sites:class-map Voice match dscp ef match tunnel-group X.X.X.Xpolicy-map Voice-Priority class Voice prioritypolicy-map Traffic-Shaping class class-default shape average 800000 service-...

Resolved! ASDM Problems

Hi everone,I recently bought an all brand new ASA 5510 and it is here by my side. I'm trying to configure it but when entering https://192.168.1.1/admin I get Page Not Found error on IE. I'm able to ping 192.168.1.1 and have success telnet 443 port.A...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Problems with NAT ASA 8.4(2)

Resolved! asa with websense, undocumented error message?

Resolved! NAT: Passive FTP with non standard port

5505 - netflow style data??

ASA 5505 unresponsive remote management

Resolved! Cut-through/direct authentication connection being denied

Configure ACS 5.3 to Assign a Group Policy at Login using RADIUS

Fan direction in ASA's

what is reason for not working even phase 1 of the vpn?

Resolved! ASA 5510 NAT Question

ASA Failover issue

ASA Config Question (Weird)

Resolved! Cisco ASA Version 8.4(3): VPN Passthrough Problem with NCP Client

Priority Queue Question

Resolved! ASDM Problems

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Ansible with FTD_FMC 7.6

Cisco FTD workaround for SSE connector failure stumbled on rights priv

Assigning an EtherChannel Subinterface to an Instance via FMC API

Questions around Dynamic Attributes Connector - FMC integrated

FTD not backing up config to remote server

Factory-reset FTD 1120 "application installation failed. Launching.."

IPSec VPN between C.2811 and Firepower with only Real IP addresses

any EOS/L decided for 3140