Hi,I have been looking unsuccessfully for the Cisco tool that take the PIX config an dconvert it to ASA (PIX 5125 to ASA 5520). I was wondering if I need that and if its a Yes, where I can find that Tool on the Cisco Site please?Re...
Hi All,I was asked to generate a monthly report regarding the ASA's firewall.I'm not sure what should be in that report!!Any ideas,suggestions will helpThanks,Omer
Hello,I can't figure this out. I am sending logs from one ASA to our syslog server and it displays on the syslog server as the hostname of the ASA, however our other ASA shows its IP, how can I get the first ASA to send its logs and show as its IP a...
Hello team.I need to protect three segments (inside, outside, DMZ) with two routers running CBAC and Stateful Failover High Availability. I would like to know if the concept shown with two sample segments (inside, outside) in the documentation (http:...
Anyone know of an area where information on monitoring VNC traffic would be?I have been asked to monitor VNC traffic and the baseline signature I have loadedon devices seems a little lacking in scope....Anyone else looking at this traffic on their ne...
Hi,Although my CSC-SSM module is down, I am stille getting the following error:%ASA-3-421001: TCP|UDP flow from interface_name:IP_address/port to
interface_name:IP_address/port is dropped because application has failed. A packet was dropped because ...
Guys,I have to ASA 5510 with a base licence. I have 8.4 on both of the firewalls, and would like to configure active/passive.Do I need only one security plus lience or two,This text has been copied from cisco.com:http://www.cisco.com/en/US/prod/colla...
Hi,Would like to know if the following behaviour is normal with a new setup on an ASA having security+ installed; (or after a reset to factory defaults);is it normal that we can't access the server on the dmz (remote desktop for example) from the in...
We just brought up a new location and we do not have a WAN connection to the site yet. Until that goes in I run a VPN tunnel between our main site and our new location. While I have had no issue with getting connectivity between the sites, I have n...
Hi Guysim trying to configure a nac manager, i did a reboot after configuring ips and it just got stop at this message "pkp_drv: module license 'CAVIUM' taints kernel" what can be the problem ???
Hello,I have found multiple solutions to this question for < 8.2 but no solutions for the new way the ASA does nat statmentsBasically i have multiple VLAN's and i need 2 of them to communicateinside - 192.168.1.0/24 ( security-level 100 )voice - 192....
All,I am updating my 8.2(3) code for my new ASA5512 that is running 8.6(1) and am unable to get on the internet with my current configuration from the inside interface.Information:Outside: ***.***.33.11Gateway: ***.***.32.9Inside: 192.168.215.0 /24dh...
Hi Dears.the ASA1 is active then the second ASA is standby mode but after 1 minute the the second asa is failed.is this config cause this problem?1.i want to know that in failover of ASA 5520can we use management interfase as a failover pair?inter...
I am running a Cisco ASA 5550 in active/standby mode. We are currently running ASA OS v8.2(3)5. I am wondering if there is a way I could limit source IP concurrent connections coming in my outside interface. Does the ASA have a feature/ACL syntax ...
Is zbfw more secure than cbac. been doing cbac but have been thinking about a general switch to zbfw for isr's. Is it worth switching to zbfw over cbac for any reason.
