Hi,What command controls whether or not a hostname includes the FQDN as seen in ASDM?I have some ASA's that are of the form hostname.domain-name and others that are just hostname when viewing with ASDM.I would like to get them consistent. Thanks.
Hi,I've been getting a bunch of these on an ASA I was tasked with cleaning up and securingDeny HOPOPT reverse path check from 0.0.0.0 to 0.0.0.0 on interface insideWhat causes this message and what does it mean? Thanks.
Hello,In Sensor Management TAB there is an option of Update sensor,from this option can we upgrade the sensor image as well as sensor signatures.I have downloaded the image and signatures updates from cisco ,, can i browse and specify the local path ...
Hello,I have configured the failover for ASA 5520. The configs are pefect and failover is triggering properly except DMZ interface. The problem i m facing is when i shut the interface for DMZ on primary ASA the failover does'nt happen but when i shut...
Dear All:We have NAC version 4.8.0 and the agent version is 4.8.1.5. The deployment type is Out-Of-band virtual gateway. Windows SSO is enable and working as a champion but the problem is when the agent successfully login the users the CAM logs out ...
Our ASA 5510 is running 8.0(5). We recently upgraded the license from base to security plus. By doing so the capacity of the the external port Ethernet0/0 and Ethernet0/1 should increase from the original FE to GE. But, we were still seeing 100 Mbps ...
Hi there,One of my customers are facing a DDoS attack on their email servers. I am in charge of ASA config.Here is what I have done so far and it was not very effective:tcp-map LimitEmail check-retransmission checksum-verification exceed-mss drop ...
Hi ,Anyone has experience on INLINE configuation for IDSM-2. I have a setup where user vlan (L3) resides in FWSM @ Data Center switch and IDSM resides in another 6509 switch which connects to INTERNET.Both of these 6509 switch communicates via OSPF.A...
Hi,Can any one have any idea on why we are seeing huge number of "Windows Account Locked" alert in Cisco IPS device towards only one Windows server.We checked whether Windows server is generating any malicious traffic by scanning the server but nothi...
Can someone advise if Cisco IOS CBAC FW really does deep packet inspection. CBAC (with inspect engine configured)does not update signature patterns as does Juniper & Check Point fw. It seems that CBAC, inspect engine is limited. I say this because th...
Hi,I've been working in 8.3 for all of my remote access vpn configs. Can someone help me correctly convert this to 8.2 version?Here is my 8.3 version (I've omitted what I believe does not require conversion, correct me if I'm wrong)object network ins...
Estimados,Tengo configurado el acceso via VPN Remotp (VPN Client) y me conecto al ASA y me da una direccion IP de la subred 10.10.1.0 pero no puedo ver la subred 192.168.88.0 que es la INSIDE y donde deseo llegar a algunos Servidores y PC's .... Por ...
Hi All,I am running 2 x Active/Active 6509-E chassis with ACE & FWSM Mods in multi context in a high avaliability Data Centre.Ruuning IOS 122-33.SXI2aRunning FWSM 4.1(2)Running ACE A2(3.2We are seeing some wierd issues and wonder if you can help. Usi...
Hi,I've configured two ASA's in failover mode as follow:primary ASA:failoverfailover lan unit primaryfailover lan interface FAIL GigabitEthernet0/3failover link FAIL GigabitEthernet0/3failover interface ip FAIL 10.1.9.24 255.255.255.248 standby 10.1....
Hi,I've been tasked with cleaning up some old client configs. One site has an issue that it cannot ping anything outside even though all of the necessary acls are in place. Packet Tracer gave me this, but I don't know how to interpret what is wrong. ...
