Hello,Does any one know if AIP SSM installed in Cisco ASA, can it redirect traffic from all the ports to AIP SSM module for inspection? (inside, dmz, outside)Recently one of our machines on the inside network got malware affected and it started ssh b...
I messed up my certificate config on my ASA and now nothing that requires encryption works. No SSH CLI, ASDM does not even give me login page. How can I reset/recover this stuff?Thanks,Diego
We need to deploy a Cisco ASA 5510 behind the Internet facing router for Remote Access VPN (RAVPN). We bought the block of 16 IPs (in a different subnet) which is routed through the main router (69.x.x.x)and configured the outside interface of ASA wi...
when I want to connect to vnc on a PC configured with an AD authentication, I get the following error on java pluginvnc of the ASA:Error: security type from RFB Onknown server: -6
Dear All,I have lost my IDSM-2 password, the default password is also not working. Is there any way to recover password?Thanks,
Hi Expert,Do you now if it is possible to disable the xlate for some connection?The ASA has some concurrent session limitation that, I think, is related to xlate connections.As my firewall is not performing any kind of NAT, is it possible to disabe x...
One of our customer is using IPS-4260(6.1(2p1)).But for some traffic IPS was unable to recognizing the Victim and attacker IP (in logs it is showing IP as 0.0.0.0) and also for the same traffic IPS was unable to take any action.Kindly let us know why...
Hi Experts ,We have an ASA (Earlier we had a PIX ) . It was required to test a new ISP link .The new ISP link was connected to the same interface on the ASA after removing the existing connection . The new public IP was also configured on the new int...
Hi All,We have a ASA 5520 (redundant) in our network which we are using for different customers. For every new customer we create a new VLAN and place their servers in this VLAN. On the ASA we create a new subinterface for every customer which is con...
Hi all,I have 4240 IPS sensor - I need to know if the device is supporting auto volt as i want to switch from 110 to 220 volt
Hello folksBrand new user. I just received my hardware and I'm attempting to set it up. No problems with setting up the 5510 so far. I used eth 0/0 for Outside and eth 0/3 for inside. Everything works as far a I can tell. Now I'm trying to set u...
I noticed today that the S623 release includes the retiring of signatures 3030-0 (TCP Syn sweep) and 2100-0 (ICMP Echo sweep). I find it interesting that Cisco has opted to have these signatures disabled by default. I figure it is part of the recen...
I have noticed this signature ( 5403-0) has been firing off more often in our environment. i've noticed some of the of the destination IP addresses are actually own by Skype, I haven't had any time to investigate fully, but thought i'd see if anyone...
Hi,I am trying to understand the example at http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_cfg_content_ac.html#wp1002224 in which the "ip inspect" command is applied to Ethernet 1/0 but the document says that the dynamic t...
As LACP or even PAgP? I can't believe etherchannel is only supported on 8.4 up...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
