HI,how do we configure cut through ASA - that would be an equivalent of lock and key router.i meant to say - lock and key router has dynamic access-list -can we configure it in ASA?
I upgraded our ASA5540 to 8.4, THEN noted the increased requirements for Memory.I purchased the 2Gig upgrade, but when installing in the Primary unit today, noted that there were 4 slots.Slots 1/3 had 512Mb modules, so I installed the 2 x 1Gig module...
Hi,I need a firewall that has an absolutely worst case throughput of 500Mb/s sustained with all security features enabled.I'm looking at the 5550 platform as meeting this requirement, but would like comments.Does the way Cisco specs their throughput ...
I have just finished setting up two ASA5510s in Active/Standby Staeful failover, using the Management interface for both failover and state. Everything appears to be working well.Configurations were transferred and the "sh failover" on both accuratel...
Hi,I have a server "published" to the outside interface with a static NAT.I've set up a DMZ, and I need it to access that "published" server through it's translated address.The DMZ has a dynamic NAT rule, using the outside interface IP address.My acc...
Hi all,I have a problem getting my ASA 5520 boot properly. I first though of a flash problem and did a flash erase in ROMMON, then it brought error 15 during boot (No images found in / Error 15: File not found). I then TFTPied and image from Rommon, ...
I am troubleshooting a s2s vpn between an ISR871 and my ASA5520 and I suspect a problem with my crypto-maps.Is there a way I can display an access-list on the ASA and have the object names substituted with their IP addresses?Thanks very much.John
ForumI am working at a client site today where we are using some packet captures on the clients ASA to perform some problem resolution.When I perform a "sho capture" on the ASA, I have this output:ODEC-ASA# sho capturecapture X type raw-data interfac...
hi all,i got one mpls ip-vpn line from our isp . it is working good i can communicate my other offices.but now the problem is i want to register some avaya phones in the branch office.but my avaya server is located in headoffice.i can able to ping my...
Hi everyone,I want to confirm if the upgrade license (ASA5505-SW-10-UL=) is backward compactible with PIX 501 firewall device?though pix 501is end of life bit i want to verify if the upgrade license for asa5505 will work with it?thanks..brsam
Hi,I have cisco ASA 5510 with ios version 7.07 & all users are browsing the internet via PAT through ASA. i want to block some sites/URLs like facebook, yahoo etc.please help us that how to do it without ISA.
Hello,I have a new ASA 5505 and all is working fine, I can CLI and ASDM into it, but just can't ping the inside interface, do I need to enable a feature to make this work somehow?Thanks
Hi,We have a FWSM running on multiple context on our network, and recently we found from ' sh service-policy' the FWSM is dropping some of our xdmcp packet.Inspect: xdmcp, packet 16208, drop 81, reset-drop 0here is the running configuration for the s...
Hi everyone, I'm having an issue, with an WS-SVC-FWM-1-K9. The card doesn't boot properly, it tries to boot, but after a while the 6500 puts it in shutdown. I've noticed that it has 2 RJ45 ports in the board, I've plugged my console cable, but i o...
How does one allow /31 mask for an management interface on an ASA5540 using version 8.3(1)?I need to configure a 192.168.x.y /31 on the management 0/0 interface of a ASA5540 and it is providing me with the following error:ERROR: /31 mask is not allow...
