Do any of the ASAs support stateful failover of site-2-site tunnels? If so does it require Active/Active or Active/Standby?Any particular model or code required?Thanks.
Dear community,We had a customer who created a loop on his access layer and STP blocked some interfaces in order to protect the network.So far normal behavior , however we would like to receive from the device when such events happen, typically when ...
Hi,I just started reading the documentation for the AD Agent. I'm getting the impression there is overlap/duplication with setting up remote access VPN authentiction to Active Directory via aaa and ldap. Can anyone who has already done this tell me i...
HiOn the FWSM I am trying to register a cert with a CA with an IP Address AND hostname, I can register fine using either an IP address or DNS hostname, but can't do both,ciscoasa(config-ca-trustpoint)# fqdn test,1.1.1.1ERROR: Invalid domain name spec...
Hi,Sudenly after Upgrade our IDSM-2 in the Realeses Tab the signature are not been updated but the IDS it self is up to date.Generaly the IDS is update but I can't see the last aplied signatures on IPS>sig>releases...Who has the solution?Regards,Sent...
Good morning.A recently added outbound rule has left my SMTP communications broken. I have since removed the rule, and had Cisco do some damage control, but it's still dropping some of the SMTP traffic. I get a number of NDR messages each day like th...
Hi all,I was hoping someone could help me with this problem, I have a pair of ASAs in multiple context mode and in a failover configuration, the contexts share a "internet" interface which they use to go outside the world and also in the case one nat...
A few weeks ago, I replaced a PIX 515E with a pair of ASA 5520's. We have a few basic web applications behind the ASA's. Nothing complex; just port 80/443 traffic. During the swap, we basically just copied the config from the PIX to the ASA....
Hello,We recently replaced a Netgear VPN router with an ASA 5505. This setup involved only one external IP, so PAT is used. There is also a VOIP server behind the PAT, wich required some UDP port ranges to be opened to it. In the Netgear (and even in...
Hi,With the firewall services module, Is it possible with the base number of contexts (Admin plus two other) to have these three contexts each with 8 pairs of bridge group interfaces ? Or would it be necessary to order additional context licenses ...
5505 ASA, 8.2(1)We can not get it to report Netflow to the collection agent at 192.168.1.34. Here is the commands I've entered:asa# show run | i flowaccess-list netflow-export extended permit ip any anyflow-export destination inside 192.168.1.34 205...
Hi,I am attempting to permit inbound LDAP and SMTP traffic from two particular IP subnets while denying it from all other sources. The destination is simply the local area network subnet. This seems like a very simple solution using this ACL and at...
When the requirement does not explicitly mention "fair queue", should we enable fair-queue in class-default? I understand it is probably better practice by having fair-queue enabled but I'd like to know the cons and side effects it may have. Say I ha...
I am new to CISCO!I currently use MS ISA Server 2006 to protect a windows internal network, where there is also an MS Exchange server. I have acquired a Cisco 5510 to enhance security at main office. Later I will have ASA 5505 for branches, including...
