Network Security

Hosts on inside cannot ping hosts on dmz, why? (ASA 5505)

Hi there,With our below configuration, hosts on the inside network (10.0.1.0/24) cannot ping the host 10.0.2.200 on the dmz network. What do we have to add/change to make this possible? We also want hosts on inside to be able to do a Mac OS Remote De...

Resolved! IPS Version 7.0(7)E4

I am using the IDSM-2 in inline mode and I am getting the following status event message :evStatus: eventId=1336563424842344750 vendor=Cisco originator: hostId: IDS1 appName: modprobe appInstanceId: time: May 15, 2012 05:48:23...

Object group, network and service objects

I am new to cisco ASAs and confused about the differences between an object group, network object and service object.Network and service objects are listed as new features in ASA release 8.3, while I see object groups in earlier ASA releases as well....

problem ASA and DNS

MI ASA works well in terms of internet translations'm posting a httpserver and external networks I can see very well the server. But if I put inside my network from the public IP with which I am publishing the server I can not see. Thank you for your...

Resolved! ssh from internal to a DMZ host

Hi experts,I need your help with an ACL because I am not very familiar with ASA 5520 yet. I'm still studing. I have been able to allow the OUTSIDE world to connect via SSH to the intermal host 172.17.2.50 on my DMZ network. I've created a NAT rule an...

Resolved! ASDM messages...im timid to make a selection

After changing some config a while back, I noticed this started showing up when you try to login to the asdm.http://imgur.com/VuQRUAll of these networks listed are on the opposite side of my site to site vpn tunnel. So I am outside would be the corr...

Resolved! Why ASA 5520 has subinterfaces

Hi all,I am new to ASA cisco 5520 firewall.I checked config of ASA 5520 it has subinterfaces on gigabit.Need to know why we create subinterfaces when it has already 4 lan interfaces?ThanksMAhesh

ASA 5505 to Internet (Part 2)

I've been trying to get an ASA 5505 configured correctly to let a laptop on one of the ports successfully browse the web. Afterwards, I'll set up AnyConnect but thats another story. I previously had a thread where I had lots of help, but unfortunate...

Resolved! Cannot SSH to Admin Context

I am having problem ssh to the admin context but I am able ssh to other contexts. I even put my laptop to the same subnet as the admin context I can ping the admin context dmz2 interface but not able to ssh. Here is the configurati...

Resolved! 5505 7.2(4) - PAT Multiple to one inside.

Hi Guys, I have a 5505 IOS V7.2(4). I am trying to add 2 static PATs using 2 external IPs to a single internal IP.This is what we have in place already and is working fine: static (inside,outside) tcp 77.xx.xx.206 www 10.xx.xx.2 www netmask 255.255.2...

ASA 5505 To Internet

I first want to apologize for coming here with what I feel is a simple question. I'm a little embarrased on how rusty my Cisco knowledge has gotten. I'm trying to get a laptop connect to an ASA 5505 to be able to browse the web. I've tried following ...

Resolved! ASA error syslog messages

We started getting the below syslog messages from one of our ASA5520 which was recently upgraded to 8.4(2).Anyone familiar with bugs on 8.4(2) that cause this or its simply the RAM failure?%ASA-3-105010: (Primary) Failover message block alloc failed%...

FWSM Active/Standby in VSS mode

hello,i do have two 6500 in VSS mode , and one FWSM module on each 6500, i want to configure these modules as Active/Standby, how do i start , should i follow this (not in VSS mode):http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/...

Active-Active firewall Admin context

Hi all, My problem statement was:my box is ASA 5585x, since this model have G0/0 - 0/7 sufficient interface, so i no need to do sub-interface for the context. My question:a. is it cumpulsary must have the admin context on A-A deployment?Somehow i rea...

ASA Failover: Maintain management IPs

Hi all,I'm trying to work out if it's possible on ASAs to have the devices failover, but have the management IP not failover. So as an example: -PRE FAILOVERInterfaceASA 1ASA2Inside192.168.1.1/24192.168.1.2/24Outside192.168.2.1/24192.168.2.2/24Manage...

Network Security

Forum Posts

Hosts on inside cannot ping hosts on dmz, why? (ASA 5505)

Resolved! IPS Version 7.0(7)E4

Object group, network and service objects

problem ASA and DNS

Resolved! ssh from internal to a DMZ host

Resolved! ASDM messages...im timid to make a selection

Resolved! Why ASA 5520 has subinterfaces

ASA 5505 to Internet (Part 2)

Resolved! Cannot SSH to Admin Context

Resolved! 5505 7.2(4) - PAT Multiple to one inside.

ASA 5505 To Internet

Resolved! ASA error syslog messages

FWSM Active/Standby in VSS mode

Active-Active firewall Admin context

ASA Failover: Maintain management IPs

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Could not ssh to ASA after upgrading OS from 9.14.3.18 to version 9.1

Assigning an EtherChannel Subinterface to an Instance via FMC API

Secondary FMCv in HA - migration to new data center process

FTD OpenSSH < 9.8 RCE

Error in connection to Certificate Authority: status = FAIL

any EOS/L decided for 3140

ASA 1010 BGP SNMP OIDs

Firepower 1120 FTD Setup

Captive Portal doesn't work in FMC

Cisco ASA uninstalling SFR module