I am trying to setup an ACE on our ASA 5520 where I need to allow a subnet access but block 2 ip address within that subnet. Should I do the permit statement for the subnet first or should I put the deny statement for the ip addresses first? For ex...
I am getting ready to deploy a 3945 ISR to serve as an internet and core router for and remote site. I will be terminating a site-to-site VPN tunnel on it and also confiugring a zone based firewall config between my "outside" (internet link) and "in...
Hello,I've just got my hands on a Cisco PIX 515.I mainly brought it too learn and play with, i done some cisco stuff in the past but not much.I just need too get this up and running with a IP Address on ethernet1 (192.168.1.254) but when I run the co...
Hi,The licenses on this ASA show "Other VPN Peers" with a value of 25.What exactly does this allow? Can 25 AnyConnect clients use this license?Thanks.
Hello,I have been asked to give access to one of our internal servers from a range of IPs within a larger subnet. It is 30 ip's within a subnet of 510 addresses. Is there a way to do just a range for the access rule source instead of creating a sin...
Hello,had anybody experience with "Cisco Anomaly Guard Module" WS-SVC-AGM-1-K9 for Catalyst 6500?We're looking for some IDS/IPS prevention system which could take 2-3 Gbits of traffic. From the documentation it looks not bad, and we can get them as u...
Will I break anything if I create a second IP address on the physical external interface of our ASA 5510? I want to point it nowhere internally but want an active interface that can be vulnerability scanned but won't lead anywhere internally.
Please guide me how to push signature,updates etc from NSM to sensors
Hi AllI have a ASA 5510. on the firewall dashboard i have a firewall usage status window. I see a chart and some statistics. The first one says ESP traffic and i have one for http, https etc. i am wondering if the ESP traffic includes all the protoco...
I have two IPS 4270-20-K9,I cant console one of them. With same setting of terminal program (Hyperterminal or secureCRT) I can connect the other IPS.If I exchange module (error module IMG_0871.jpg) between two IPS, I can see error module still get e...
Hi,We are implementing an IPS 4270 in promiscous mode, however when connecting one of the interfaces (ips-4ge-bp-int) with a straight cable it comes up for seconds and then go down again. I tried a cross cable and the intreface comes up. Should we us...
Hello everyone, we have hosted voip and would like have our internet as back for their router. We gave them public static ip so they can configure that in their router. How can i configure the ip address in our firewall let say on asa5510 ethernet ...
Can someone help me discipher this IPS Alert Please. I have a series of these alerts along some other Alerts but I don't know how to interpret them.*DROP*[1:1001429:1] BEA WebLogic JSESSIONID Cookie Value Overflow [ Reference: http://tools.cisco.com/...
Dear Support-Team,I want to configure NATing in my ASA firewall for providing internet to the local users.My BSNL modem configured in Bridge mode.So i want to enable PPPoE dialing in my firewall outside interface.Please tell me the configuration.Rega...
Can any one help me how to configure NAT on a 5510 Firewall.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 06-24-2026 08:00 AM | ||
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM |
| User | Count |
|---|---|
| 6 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
