Network Security

Resolved! IDSM-2 upgrade process questions.

Hello,I started a new job and have been tasked with looking into what we can do with the IDSM-2 module we have in our 6509. The company has not been using the module so it hasn't been updating in a few years. I do not have a current license so I know...

Resolved! ASA Interface Security Level

Hi all,I'm building a new ASA configuration with a dmz interaface and an inside interface.dmz security-level 20inside security-level 100ASA ver 8.2(1)I found that I can pass traffic from hosts off the dmz to hosts on the inside without having to defi...

Anomaly Detection in IPS

Hi,I am going to configure ad0 in IPS ver 7.0 using IME. If there is any guide to configure ad0 using IME then please share...

NAT Questions

Can anyone help me ?I would like to know if the following is possible on an ASA, I have tried to get this working but I am having great diffculties:I have a three interface ASA running 8.3 and I want to have the following functionality:1) Have some h...

Cisco ASA 5505 doesn't allow local provider smtp traffic

Hello AllWe are using several Cisco ASA 5505 with the 8.05 OS on it. The problem is that the SMTP traffic of my ISP(Telenet) isn't passtrough the ASA, I'm using outlook 2010. Before there was also a problem with our local exchange server but I solved...

Adding a new subnet to map to a separate public outside NAT

I currently have all internal traffic natting to the IP of the external interface of the ASA 5510. Now I want to add a new subnet and I want that traffic to translate to another specific public IP address on the outside. What are the steps using th...

Resolved! Cisco ASA version 8.4 using 2 ISPs as failover

I have a Cisco ASA 5510 and I am trying to set it up to be able to have it failover to the 2nd ISP connection if the 1st one ever went down. I think I need a nat statement that the "backup" connection will use when the 1st connection goes down, but ...

Resolved! FTP issue through Firewall(2)

***This is the 2nd instance of this post. I had to post it again, as I had inadvertently hit "ANSWERED" on the original post. The question is still "NOT ANSWERED".Here is the original post...I have a very interesting problem at a client site this m...

Website partially blacklisted?

Hello I'm trying to troubleshoot access to a particular website that has been working previously for one of our ends users. The user states that she was able to access the site previously but it now is presented with "cannot display the webpage." I...

Having internal hosts access DMZ hosts with external DNS name but private IP

Three interface ASA Scenario: Inside 10.10.10.0/24 Outside 4.4.4.10/24 DMZ 192.168.1.0/24External users resolve www.acme.com to 4.4.4.10 say.I want internal users to resolve using external DNS but when they that traffic getsto the ASA I want t...

FWSM not allowing hosts communication on same interface

Hi Experts,I have an FWSM configured which has communication between hosts on the inside interface(10.101.101.254). The inside host 10.101.101.10 with default gateway as FWSM is trying to communicate with another internal host 192.168.200.6 (differen...

Enabling Traffic on E0/2 and E0/3 Ethernet Ports - ASA 5510

Hello Everyone, I am needing some guidance on enabling traffic between interfaces on the ASA 5510. Of course I have an outside interface E0/0 and an inside interface (E0/1) for normal operation. The idea was to enable one of the remaining interfa...

Resolved! ASA5510 Port Question

Hey guys, I am using an ASA5510 for internal firewalling in my QA environment. How do I allow RDP from one subnet to those protected by the firewall? Preferably using the ASDM. Thanks!!

Resolved! The IP address, ..., cannot overlap with the subnet of interface ...

OK well I want my block of IPs (30 IPs) to be used on two different interfaces. That's posible right?For example I have three vlans total..."inside" vlan - 10.50.1.x"outside" vlan - 12.175.10.204"dmz_ftp" vlan - 12.175.10.206Note: both the "outside" ...

Resolved! Throttling traffic at the ASA?

I am adding a new network beyind an ASA that will be sharing the 100Mbps Internet feed. I want this new subnet to consume no more than say 80% of the available bandwidth. Is there a way to enforse that on the ASA? Or would that need to be done ups...

Network Security

Forum Posts

Resolved! IDSM-2 upgrade process questions.

Resolved! ASA Interface Security Level

Anomaly Detection in IPS

NAT Questions

Cisco ASA 5505 doesn't allow local provider smtp traffic

Adding a new subnet to map to a separate public outside NAT

Resolved! Cisco ASA version 8.4 using 2 ISPs as failover

Resolved! FTP issue through Firewall(2)

Website partially blacklisted?

Having internal hosts access DMZ hosts with external DNS name but private IP

FWSM not allowing hosts communication on same interface

Enabling Traffic on E0/2 and E0/3 Ethernet Ports - ASA 5510

Resolved! ASA5510 Port Question

Resolved! The IP address, ..., cannot overlap with the subnet of interface ...

Resolved! Throttling traffic at the ASA?

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Difference in BIOS versions between SNS 3615 and C220M5

Secondary FMCv in HA - migration to new data center process

FTD OpenSSH < 9.8 RCE

Error in connection to Certificate Authority: status = FAIL

Firewall Migration Tool v7.0.0.1 now live!

any EOS/L decided for 3140

ASA 1010 BGP SNMP OIDs

Firepower 1120 FTD Setup

Captive Portal doesn't work in FMC

Cisco ASA uninstalling SFR module