Hello,According to the ASA logs, a lot of dns packets (from root dns servers) are dropped because they exceed the limit of 512 bytes (size limit fixed in dns inspection).It seems corresponding to DNSSEC packet.Which value should I use for the DNS pac...
Hi,I am looking for the way to define an idle timeout for specific flows on an ASA5580 by using Cisco security manager.For ex I needed to define a specific idle timeout for connections beetween specific devices (Devices in vlan1, Device2 in vlan2).To...
Hello, i am working with 871w and i am trying to switch form ip inspect to zone-based firewall. Below are the class-maps, policy-map, zone-pairs, zones, and ACLs. The issues i am having is that onces i depoly the ZBF, i can not get ip via DHCP. Pl...
Hi,i have cisco ASA 5510 Firewall using in my network .i have planning to upgrade the Flash memory from 256 mb to 512 mb and the RAM from 256 mb to 1GB.Please provide me the steps and guide line to perform the Task.which task will pe...
HI Experts , Can you please give me an idea about what this IPS/IDS module for ASA 5505 is ? How much does it cost ? How do I install it and configure it to work with ASA 5505 ?We also have a few site to site VPN setup from ASA 5505 . Would this affe...
We have a requirem,ent of adding IDS to CSM and then forward the IDS related logs to SIEM tool . Please suggest
I'm struggling to get my NAT working as I am upgrading from a PIX to an ASA running 8.4. I'm trying to duplicate the following that was taken from the PIX:PIX NAT shown here:nat (inside) 1 0.0.0.0 0.0.0.0 0 0global (outside) 1 interfaceglobal (outsid...
Hello,I have been asked to setup a IPSec site-to-site VPN with a company partner. They require that we NAT our internal hosts to a different network before sending across the tunnel. These same internal hosts need regular Internet access. I only w...
Hi ... I'm trying to configure UC-Proxy using an ASA 5505 with software version 8.0.4.I was following the instructions in DOC-5704 and ASA 8.0 CLI.I don't have USB security tokens in UC solution, instead I'm using IP phones Cisco 7961 with MIC.I con...
Hi everyone,I have a slight issue with one of our ASA 5510's.I am getting flooded with "Deny IP spoof from (192.168.50.XXX) to 192.168.102.XXX on interface inside"The 192.168.50.XXX in actually the ip address of the inside interface of the ASA and th...
We have a corporate network and when any user tries to download a pdf file from a specific site i will fail about 95% of the times.The site is www.mineduc.cl. I've been monitoring the firewall using ASDM and filtering mi ip address and i got the f...
What is the maximum number of ASA5520s you can configure for a firewall failover in a cluster? The documentation mentions 10 appliances but that seems to be for VPN only.
Hi,We have a transparent firewall (fwsm) between 2 ospf neighbors.Although the ospf neighorship is formed and the ospf neighors are placed in FULL state the neighborship is teared down after dead timer expires.It seems to me that ospf hello is not pa...
Hi,Has anyone figured out an easy way to convert custom SNORT signatures to the Cisco IDS? There seem to be a lot of parameters that don't really match in the Cisco World to the Snort world and I am wondering if this is something that people are tryi...
HiPlease send me the document regarding above config.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
