Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Hello All,I have been struggling with this issue. I have a ASA 5505. I want to be able to ping from my workstation to some address, lets say www.yahoo.com. My workstation is connected to Ethernet 0/2. I have tried playing around with the ACL but ...
I've just taken over a new network with a Cisco ASA5520. Everything is working fine, except I am being bombarded with 106001 alerts from a few internal hosts to one specific internal host. The description in general is "Inbound TCP connection denied ...
I have an ASA5510 running version 8.4. ICMP is blocked from the internet to the outside interface of our firewall but now our ISP is requesting us to allow ICMP from their network to the outside of our ASA. I need to allow ICMP from three blocks of I...
Hi,Anybody has seen this issue, or even better, solved it :-)We have 2 failover clusters that works fine for some time but after a random time (6 to 50 days seen), for an unknow reason, the 'no failover' command shows up in the secondary firewall co...
I recently puchased an ASA 5505 that came with the base license only to have to randomly pick devices to not allow internet access to. I found out that the base license only allows 10 inside hosts, so I upgraded to the Security Plus license. Accord...
Hi All,Where can I obtain this tool please, I have checked the Cisco website but dont seem to find it.I do have partner access and am able to download software.RegardsZubair
Hello everyone,I am not sure if this can be done in asa 5510. Is there any way we can configure that when our public ip goes down i get an email? Thanks
Hi,I know interface ACLs are not applicable with ZBF, so a different implementation is used. That's documented elsehwere. What I don't know is, given the outside interface ACL for my router (below), how do I implement some of those features? For exam...
HiTrying to trigger EEM when 'ip sla reaction-configuration <nnn> react timeout threshold-type consecutive 5' is exceeded.If not using consecutive, can use syslog or snmp mib to detect when RTT threshold is exceeded. Cannot work out how to detect wh...
Hi,I am trying to use VPN to access our local network addresses from anywhere on the internet. I have VPN setup on the ASA and I can connect with the Cisco VPN Client but I cannot telnet or ping any addresses on my local network. I can access publi...
Hi Guys,Got a little bit of a problem. I am trying to write a compliance job that is going to adjust the config in a trustpoint. I need it to first confirm that the trustpoint exists and then add some additonal command to the trust point.crypto pki t...
Hi Support,We have a Cisco ASA 5520 with CSC-SSM-10 module. We are looking to purchase a license ASA-CSC10-USR-100= to upgrade the users to 100.This ASA was purchased and used in India. Since Cisco license delivery is more than 6 weeks in India, can ...
