Hi, I just ran a vulnerability scan against the outside interface of our Cisco 5520 ASA. An d it returned a IKEv1 vulnerability (see below). Id IKEv2 out?THREAT: Cisco Internet Key Exchange (IKE) is exposed to a denial of service issue. This issu...
Hi Guys,Is it possible to upgrade the Pix 515 memory to 256mb. I searched on line and found there is not option to upgrade to 256mb. Can someone please confirm this?Also during search I found people saying using 3rd parties Ram, pix 515 can upgrade t...
Hello,Does anyone knows how to get more detailed info about ASA DMA memory pool?We have an ASA device which has an alarm regarding low DMA free memory.show mem detail, says following:Free memory: 867150136 bytes (81%)Used memory: ...
I have a VM that I run IME on. The problem I have is if there is a power outage or other event that causes the ESX server to reboot, then I have to login to the IME server and start IME. Can I setup the IME to auto load?
I need to remove FWSM from a prodcution 6509. This FWSM is a standby. What's the best way to remove without powering down the switch or impacting antyhing? Someone could please advsie. Thank you
I have a setup on a client site very similiar to the attached diagram.There is a route on the ASA to get to a remote site the other side of the router over MPLS cloud pointing to router.You can ping to the remote site but cannot http to a device at t...
I have disabled Unicast RPF on a Cisco ASA 5510 for one specific interface. However, how do I verify that RPF indeed has been disabled on that particular interface? It doesn't show up in the config, neither does it up when I issue the command "sh int...
Hi,I'm having issue with doing tftp to device behind the firewall (ASA) even though I have allow tftp from outside. Here is the message I see on the console.ciscoasa/C2(config)# ciscoasa/C2(config)# ciscoasa/C2(config)# %ASA-6-302016: Teardown UDP co...
Hi,I am using ASA5510 and i want to know if it is possible to redirect http traffic to an internal proxy software.I explain :PC from the LAN use a internal proxy in their IE browser but some other PC doesn't use it.They are directy connected to the I...
I have a normal setup of ASA5505 (without security license) connected behind an internet router.From the ASA5505 console I can ping the Internet.However, users behind the Firewall on the internal LAN, cannot ping the Internet even though NATing is co...
Hi,We have an IPS 4240. We do not have any SNMP logging,but there are many Alterts of High siverity and we would like to know all that is of High sivereity. But when we query the event viewer, it shows only for the last 3 days. Does this mean the log...
Hi,We will like to achive HA between two datacentres.Please see an attached topology diagram.Our ASA will be connected through Pair of Nexus, and if the WAN link broke between two datacentres, how will ASA will detect the failure because local link b...
Is there a Security Plus trial license available for the ASA 5500 series? I currently have one sitting around that I would like to use for testing, but it only has the base license...
Hello,I recently upgraded my firewalls to 8.2(4), since then we have had an issue connecting to remote hosts vis ssh. (this upgrade may be a red herring as it didn't effect ssh on another site)the problem is from inside i can start an ssh session to...
Hello,Is there some documentation on what exactly the default esmtp inspect map does? I am unable to find any. I would like to create an own esmtp inspect map but would like to base it on the default map.By the way. Cisco's default esmtp inspect map ...
