Network Security

Resolved! Routes Not in ASA 5510 Routing Table

I just finished using the pix to asa migration utility and for whatever reason my routes from the pix didn't get migrated to the new ASA config. I manually typed them back in on the ASA and they went into the running config but when I type "show rou...

Resolved! ASA 8.4 NAT Command Selection

Hello,I am designing a new NAT configuration for an ASA 8.4On my PIX 8.0 configuration I needed to allow bidirectional traffic between interfaces with different security levels. For example, Inside at 100 and dmz at 50To accomplish this in 8.0 I use...

Preventing web server scans on IPS

Hi,IS there anyone who knows how to prevent a web server scan from getting the version of the IIS web server through a cisco IPS. I tried to set all the signatures that fired to ( drop packet, reset TCP connecction and drop connection inline ) but no...

Resolved! Can LDAP-authenticated remote user be assigned a connection profile?

ASA 5510 ASA 8.0 ASDM 6.1 I want some remote users to have split-tunnel connection, others not. I used Cisco Document ID 100936 "Allow Split Tunneling for AnyConnect VPN Client on the ASA Configuration...". I created a new Group Policy with split-t...

change external ip remotely

I need to change an asa external ip address remotely, usually when we do this type of thing with the routers we reload in 5min and if the new ip does not kick in for some reason and we loose connection, reload in 5min takes care of it.Question is : i...

Resolved! CISCO ASA 707-k8 NAT giving tough time

I have been working with ASA from last 3 years, but this one made me madits 5510 with base license.broswing not workingnat (inside) 1 access-list permitallglobal (outside) 1 58.65.x.xand nat not working.Capture shows packet leaving outside, but they ...

PIX515 6.3.3 dual ISP

HiI have a pix515 v6.3.3. Is it possible to configure dual ISP on two interfaces and have redundancy between them?regardsVipin

Which part number for CSC-SSM with Plus license?

Dear All,Which part number for CSC-SSM with Plus License? i saw the part number for standard license.could you let me know?Best regards,

Resolved! IPS Detects SQL Injection over HTTPS

helloDo you think Cisco IPS is able to detect SQL Injection over HTTPS?

HTTPS traffic filtering with regular expressions

Dear Experts!!!I try to configure URL filtering in ASA (without CSC and external server).I know how to do HTTPS filtering. But here tell me its working with HTTPS or not???I am using IOS 8.4(2).With IOS 8.4.2 HTTPS filtering is supporting with CSC mo...

Resolved! ASA NAT on outside interface - different subnet

HelloIs it possible to configure a different subnet on the outside interface only for NATfor example if the outside interface is 192.168.168.100.1, then can we have a subnet for doing static nats such as 192.168.101.1/28. Are there any additional sta...

Static NATS on FWSM Contexts

Hello,Resposting this since no replies were recieved for the earlier postI am just designing a solution where a FWSM consists of 2 contexts initially and has a shared outside interface pointing to the 6500 switch. There are 3 subnets connected to eac...

Restoring ASA 5505 configuration

Hi,I have got a working 5505 ruinning 8.3.1 firmware and 6.3.1 ASDM.I have now purchased a second unit and ensured that both units are running the same firmware levels etc.I have via the ASDM created a backup of the working units configuration, and n...

Resolved! botnet filter no longer functions after disk format

Hi,I was having major issues with a 5505 (too long a discussion to go into here) so I formatted the disk and uploaded fresh binaries and recreated my configuration. I noticed the licenses were preserved. I also noticed there were several fsck records...

ASA FO/State Link supported over MPLS?

Hi Team!I am after any advice previous experience with running ASA5585’s in active/standby across a local campus MPLS network. Supported design, leading practice etc.Specifically our design is that two ASA5585 are configured as active/standby through...

Network Security

Forum Posts

Resolved! Routes Not in ASA 5510 Routing Table

Resolved! ASA 8.4 NAT Command Selection

Preventing web server scans on IPS

Resolved! Can LDAP-authenticated remote user be assigned a connection profile?

change external ip remotely

Resolved! CISCO ASA 707-k8 NAT giving tough time

PIX515 6.3.3 dual ISP

Which part number for CSC-SSM with Plus license?

Resolved! IPS Detects SQL Injection over HTTPS

HTTPS traffic filtering with regular expressions

Resolved! ASA NAT on outside interface - different subnet

Static NATS on FWSM Contexts

Restoring ASA 5505 configuration

Resolved! botnet filter no longer functions after disk format

ASA FO/State Link supported over MPLS?

FMCv License Upgrade

pxGrid session subscription missing radius accounting session Id

Model Migration - 4110 Native to 4225 Instance S2S VPN Configs

ASA upgrade procedure on Hyper-V

Announcing the release of Firewall Migration Tool Version 7.7.10

Upgrade 7.6 -> 7.7 stopped media and ftp, is inspection the culprit ??

SFDataCorrelator down on Standby FMC

Recovery of "admin" password in CIsco ASAv runnin on AWS

Cisco FMC Access control policy under default

AnyConnect MAC OSX exclude/include DNS not working