All,Can ASA sub-interfaces run separate IP Sec VPN tunnels eg There are 02 sub-interfaces of 01 physical interface of Cisco ASA5510 [ASA Version 8.2(5)] and I need to run 01 IP Sec VPN tunnel on each of these Please help,Thanks,
We currently use a linux software based firewall called IPCop that sits between our network and router (This is in bridged mode) IPCop conects over PPPoE and everything works fine. However the system is not reliable and I fear not that secure so have...
Hi,I'm new with Cisco licencing... I have Cisco ASA 5505 product in home with base licence with 10 hosts limit. More information below.I bought upgrade "L-ASA5505-10-UL=" to remove hosts limit and I got certificate with PAK. But when I go to Cisco li...
Hello everyone,I have an ASA 5505 and I cant get it to forward RDP, but I do get hits so Something does work.I have attached my configuration. Can someone help me with this please? Just need to forward the RDP (Remote Desktop Protocol) to 10.0.20.2--...
Hello you knowledgeabe lot! A have a question - sorry if this has been asked before but I couldn't find an answer using the search facility....I need to use a firewall to segregate a lab from our main network.I don't need any 'fancy' features, no VPN...
Hi All :Below please see my client email access picture in attach file. It happens the email access from DMZ zone of RTDB firewall fail to Edge Network mapped IP address.Funny thing is the access from partial network is OK as indicated separately : ...
Hello,i have an intressted problem with my ASA 5510 CSCi configured many firewalls till yet and i configure the normal static often times but this time it is not working as assumed.Cisco ASA 5510 in failoverPublic Network: is a x.x.x.128 /28the two i...
Hi all,I’m having the issue in subject, in a fwsm, but the strange this is that I have the acl created to allow the traffic. And there is no “deny” rule that can cause any issue.Can this be caused by nat-control?Thanks all
Hi guysI have an ASA 5520 running 8.0(3) with two Subinterfaces configured like this:=================================interface GigabitEthernet0/1 nameif inside security-level 100 no ip address!interface GigabitEthernet0/1.72 description VLAN 72 vlan...
Hi all,We have a Cisco IPS device in monitoring mode, monitoring 2 segments of traffic via spanned ports on two different 3750-x switches (inside and DMZ). After a period of say 2-3 hours the ports just stop passing traffic to the IPS device. To chec...
Hi We are having a IPsec VPN Tunnel setup with client.The far site gave access to a new range (a website basically hosting on their site)-10.40.36.173:8085They allowed traffic across the tunnel from: 10.40.36.173:8085 to 10.20.42.0/23, 10.21.42...
I can't seem to get this going for thie life of me, maybe a little fuzzy on the concepts but I've done this before without problems. I need the DMZ hosts to be able to ping anything we have inside and outside our network. I will lock down anything el...
I'm new to Cisco ASA, looking for some help. I am trying to configure Nat on a clean ASA 5505, but can't get it to work. I ran the commands below. On the ASA I can ping the internet and inside vlan ip. On my laptop I can ping the ASA inside vlan i...
Dear,i have a ips card installed on an ASA.The ASA version 5520 8.2(5)26ips sensor 7.0(7)e4 Can you help me to understando how to identify the new signature after an signature upgrade?I don't understand how to search the news signat...
We had our primary ASA-5520 fail. Both primary and secondary were running 8.4(1). The primary was active, and we only configured the failover commands on new primary ASA. However, upon inserting the primary ASA into the network and powering it up, we...
