Hi,We are going to purchase ASA-5510-SEC-BUN-K9 in order to configure failover do we need only the same model of firewall ? or is there any thing like software feature or hardware port we need to have to configure the failover.Regards,Faisal
Has any one seen the output from a show run just hang for 2 to 3 minutes before continuing.notice it at this line: snmp-server enable traps snmp authentication linkup linkdown coldstartand at the service-policy global_policy globalalso does ...
Hello,I am configuring ACS 5.1 to allow device management of cisco devices. However I am facing issues with the Command set on the ACS 5.1.I am allowing certain commands on the ACS to be allowed by certain set of users. I am unsure which privilege le...
Hi all!The Problem is, that in a remote location is a FAX-SIP-Adapter with his factory default address 192.168.2.1. I need to configure this device.In the remote network has the address range 192.168.170.0/24.Well, I tried to change the intern interf...
I'm experiencing a very big degredation in throughput when I route through my FWSM. But it's a strange issue.We have a 6513 with a FWSM. If I take that vlan out of the firewall group, and don't route through the FWSM, I can hit 900+Mb/s using PerfSon...
just one question. enabling sysopt np completion-unit , will it impact my fwsm. I have around 7 contexts and i am getting lots of out of order packets and slowness while transfering huge files. Can anyone help. Is it recommended.
Hello everyone I am having some issues with IOS 15.1.3T on a 2911. I'm by no means a Cisco expert and am trying to teach myself the ins and outs of IOS but am having some difficulties that I am hoping someone can help me out with. The first issue ...
I need to plan a firewall replacement (old 515E) with something newSIP server on the inside (unfortunately not Cisco)SIP provider on the outside, udp/5160Does the ASA support SIP/udp on non-standard ports? Info on the documentation is a bit unclear/c...
I have a remote offcie that looses internet connectivity sometime for what ever reason, long power failure, ISP down, etc.The cable modem and static IP ( which is held by the ISP's cisco 800) internet connectivity will come back online but the ASA550...
Guys, I have got an question from a customer asking how IPS GC deals with legitimate ip addresses being spoofed and used for attacks. Customer is concern about their customers ip address being spoofed and marked with bad reputations and after receiv...
Is it possible to write an custom signature to look for a specific response (a field/value within the packet) in replys to packets that have already traversed the IPS. And if no response was recieved in x amount of seconds an alarm would fire.
Hi,I'm working on a configuration for a client in my lab and I'm getting this message when pinging from one site behind a vpn peer router to a site behind the ASA5 Feb 03 2011 11:26:38 172.29.6.231 Asymmetric NAT rules mat...
Hello All,I set up a nat on ASA with different inside subntes and a DMZ, I can ping from any one of my subnets the next hop router with true nat translation from packet tracer.But I can't ping the next hop router "the router after firewall" from my ...
