SNAT as in "Source NAT". I'm trying to setup dual firewalls and want to use both concurrently while I transition my inbound NAT rules to the ASA. However, the default route on the core switch prohibits me from doing this since it only knows about t...
Hello there,I am configuring remote host blocking on SSM-10 within ASA to make shun on certain signatures. SSM-10 resides on the same ASA on which it should perform shun action. But unfortunately it doesn't work. ASA version ins 8.4(3) and IPS versio...
We are replacing our EOL Watchguard X1000 Firewall(s) with Cisco ASA 5510 unit - ASA Version 8.4(3). Following is the static NAT I have build and the corresponding access list.nat (FW2Inside,FW2Outside) source static BW_XSP1_Private BW_XSP1_Public d...
Hello,Let me start by saying that I'm just starting to study for CCNA, so the ASA seems to be a bit above me yet. The ASA's we are using is for VPN to our corporate office and only allowing access to our Citrix environment, so no direct internet all...
Folks:I need a little help with this question since I never encounted a deployment like this.I currently have a server on the internal network that is has been NAT to the subnet of the DMZ. I cannot ping any internal servers from the DMZ that has not...
Need to setup some static NATs for some networks and IP ranges. Rather than setting up 50+ individual NAT rules I'm thinking 8.3 or 8.4 supports snat for networks?Example73.11.200.88/29 and 192.168.0.64/29so 73.11.200.88 would always be static NAT fo...
I have a third party firewall behind a Cisco ASA. The Cisco ASA is doing PAT as there are no other IP addresses available. The third party firewall is attempting to build an IPSec tunnel to another firewall. The IPSec tunnel is not coming up. When I ...
Hi,I have a query. I am using a 6500 with FWSM. I need to separate an internal server/HQ network from 3 or 4 different external connections. The external networks do not necessarily need to be isolated from each other.I have the option of using a 3 l...
Hi,I have an SSM module in an ASA 5510, when I try and change the host IP the SSH session to the ASA freezes and returns with a timeout error. After issuing the show module 1 details command the configuration remains the same.I am using the session 1...
Hi:I have multiple internal networks.192.168.3.0192.168.20.0192.168.21.0I am currently overloading the entire 192.168.3.0 network to an outside interface .xxx.76.40.19Can I also overload portions of the 192.168.20.0 and 192.168.21.0 networks to the s...
I have 2 ASA 5540's that I want to run in HA A/F. The active ASA has an IPS module running. I no longer need this and would rather remove it than purchase another module for the spare. What is the process to do this safely? After removal will the ...
tengo el siguiente problema:al realizar el update al JAVA en un windows 7, se bloqueo el ASDM no pudiendo ingresar mediante esta herramienta a la administracion de un ASA 5510 que tengo actualmente en produccion. lo que intente es hacer lo siguiente ...
How much load cpu or memory will running asdm in my browser put on the asa device? Should I be running this at night during non-peak hours?
Hello everyone, I had a question about this ACS Software, do the ACS License expires ? Or can I use it indefinitely? Kind regards.
Is there a way to configure an object group host by domain name instead of IP or other work around? I want to use my dynamic dns domain name as the host that is allowed in the firewall.So instead of,<code>object-group network REMOTE_USER1 network-ob...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 08-24-2026 01:47 AM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM | ||
| 08-10-2026 08:58 AM |
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
