Guys just need to know how to check the hits on acl ah access-list / inc acl name or if I need to check specific line in acl ??? How we do that Sent from Cisco Technical Support iPhone App
Hi,I nice easy one for you guys.How do you save the command output from the CLI to a file on flash?With IOS, I would normally use a pipe command to redirect to tftp, but the ASA doesn't support this as far as I can tell. As a work around I was think...
All - I have an ASA (US-HEN) on a public IP that is a fiber based connection. Then there is a private point-to-point from the same fiber service company. Both ASA are 5510 in routed mode. The second location (US-LEX) used to have a site-to-site VP...
Hello,I have 2 5520 ASA's in Active/standby mode, they both have the AIP-10 modules installed with 7.0(6).E4 installed.How can I test it is all working can I fire any test scripts through the ASA to trigger an alert and se that it gets blocked?Also h...
Hi Netpros,I have a situation where I need to bypass any inspection between two hosts. I currenlty have the IDSM-2 performing in-line VLAN pair. From reasons I can't currently detail I don't have access to the web interface and the...
Hi everyone,i'm setting up vlan and inter-vlan routing in my lab. My vlan work well (routing between them and dhcp relay) on the LAN side of the ASA but they cannot reach internet trough the ASA.I read a lot about this issue and tried different confi...
Hi , I have FWSM with two outside interfaces , is there a way to configure two static route one primary to the first outside , and the other is backup ? I have read this document , https://supportforums.cisco.com/docs/DOC-12015 It use the comma...
Hi!I would alow trafic between to sites trough my asa firewall, but there is a overlapping ip addresses. I know that it can be solved with somting like nat 0 i pix firewall, but how can I solve this in ASA firewall. If any one can help me with proper...
I am sadly lost, again, and need help.Everything I thought I knew about NAT'ing seems completely backwards.I am struggling to understand an existing config.Here are the pertinent lines:interface GigabitEthernet0/0 description ASA_NET_227.76.40.19/28 ...
Hello,I am having an issue where ICMP "Unreachable, need to fragment" packets sent by the ASA are not delivered, apparently due to asymmetric NAT rules, when communicating over IPsec VPN. The device is a new Cisco ASA 5510 with Security Plus, running...
Hi,I have an ASA 5540 , how can i block softwares like TeamViewer , VPN Adapters like Hamachi and all.Also , I have tried URL Blocking but i suppose ASA supports only HTTP url block and not HTTPS.
Hi,I have an ASA 5585, I need to create user that have can only add, remove ,change rules in firewall section in ASDM, for other sections just read-only rights.Anyone have this experience?thanks
Can i enable full vpn acces via my cisco asa5505 with only the ssl-vpn? I dont mind having to download a small java client to give me full-access to the network but I dont want to install a client on the local machine. is this possible and if so...
Hi all!Can I disable nat at all. I mean comand like this:no nat (inside) 1 0.0.0.0 0.0.0.0 I want to use my device like router. Does it work?(I did access-lists and bind it to interfaces.)
Hi, One of our hospitals keeps reporting that their internet is going out for a while than comes back up, sometimes they even have to reset the ISP modem for this it to work again. I upgraded and switched ISP to Time Warner Cable and figured it w...
