Does anyone know why my DMZ interface always only shows an orange link light? It has all the same settings as the other interfaces but stays orange. I don't know if this could/would cause any issues.
i upgraded from 7.2x to 8.2, and then upgraded to 8.3.1 however, now remote access vpn stopped working. i read https://supportforums.cisco.com/docs/DOC-12569 already however i am either not understanding that correctly or am not sure how that helps...
Here's the situation, my network has a Cisco 1811 router. This network is going to be mostly used for remote field operators to VPN into the system (via SSL vpn) and once they have established a VPN cnnection they will use a remote desktop protocol (...
I am trying to setup LAN based failover Active/standby between two 5550s. As I was reading a documentation on Cisco website, it is instructed that all of the interfaces are needed to be configured with active and standby ip addresses. I'm trying to...
I read in the book "Cisco NAC Appliance: Enforcing Host Security with Clean Access" (published 2008) that the Real IP Gateway mode is only IPv4 compatible but that IPv6 compatibility will be provided in a future software update.Having searched around...
We have some old systems that use nat-control as they were upgraded from older pix releases.My main question is, if we disable nat-control, what other actions are required?For example, does the firewall needs to be restarted? or Clear all xlate and c...
Hi,Below is my configuration detail which from which I have been having difficulty access the DMZ (webserver)from the outside.thanksasdm image disk0:/asdm-508.binasdm location 192.168.1.5 255.255.255.255 DMZasdm location 192.168.0.0 255.255.255.255 I...
Hi everybody,I have the global service policy enabled on my internet ASA5510:class-map global-class match default-inspection-trafficpolicy-map global-policy class global-class inspect ftpinspect httpinspect bla bla..I just wanna disable the inspect F...
I'm being asked to send logs from an ASA5510 to a syslog server on port 40991 thats behind an interface with a security level of 50.At this point it's not working, the syslog server is 192.168.233.43 and it's behind an interface named APP with a secu...
Hi, we have a Checkpoint Firewall we are migrating to an ASA.One type of access we have, is for groups of users on the "outside"interface, connecting to Servers on the "Inside" interface.These Servers' addresses are NATted, in a way that the users wi...
Hi Team ,We are using the Spectrum (CA) prodcut for monitoring the Cisco IPS logs , suddenly the new oid has come into picture , so can any one let me know the latest oid list for 4260 IPS box. We are using this box in IDS mode.Shridhar
I'm running into a issue with traffic. I have a backup location with internet and connected via MPLS. I need traffic to route to the main location. Do I only add default route to the asa to point to the main ASA network?Or do I add a static nat to t...
Simple question. Do you think it's overkill to secure a single system down beyond the basic outside_access_in ACLs? The situation is one box with ssh, https, and dameware. The 8.3 ACL configuration:access-list INTERNET_access_in remark HTTPS Ruleacc...
I have configured asa 5540 with failover it is in single context and routed mode.Now i want to configure preempt in failover config so that my active firewall should again regain its active status when things become normal after failover.I am aware ...
