Network Security

ASA 5505 stop working

I am with a problem in one of the firewalls of my company. - Almost everyday the firewall stop working and I need to restart it because I lose the remote access; - This is a ASA 5505 with 7.2.4 firmware; - There is a configuration default that I use ...

PIX Reboot Daily 6.3(3)

Hi,My single uni cisco Pix with UR license keep rebooting from last 20 days approx, daily or after one day.i enabled logging, the only message i received was%PIX-1-101003: (Secondary) Failover cable not connected (this unit)Though its a single unit a...

NAC SSL certifitcate - Internal CA vs. 3rd Party Cert

What, if any, drawbacks are there to using Internal CA generated certs (ex. Microsoft CA Server) vs. 3rd Party Certs? Besides the obvious drawback that you have to add the internal CA server to all the NAC devices and I'm guessing clients running the...

Phantom Connections on FWSM

We have a transparent firewall context on a FWSM (code revision: 3.1(16).Recently the number of tcp connections has been increasing to a point where it hits the limit defined in the static and new connections are denied. However a "show conn | inc x....

ASA: Logging reachability events for "sla monitor" / "track"

Hi forum,I have a dual ISP setup, with two separate output interfaces. I'm automatically monitoring the primary ISP via "sla monitor" and "track" commands, and removing the default static route when the ISP's router is not reachable. That's working ...

"match not request" in MPF configuration

Hi,One of my clients needs to allow only their cache servers to access their webservers on port 80. No one else should be able to access these servers from outside. We cannot filter using source IP because, we do not have the list of all cache server...

Resolved! CSC-SSM: HTTP scanning enabled and Citrix

Hi,We have the following architecture:Internet ---> Firewall Juniper ---> DMZ ---> Firewall ASA ---> LANIn DMZ, Citrix Secure Gateway 3.01 and Citrix WebInterface 4.0 are installed on a Windows 2003 Server.The Citrix Farm (XenApp 4.5) is in the LAN.W...

class-map with DSCP and to/from specific IP address(es)

Hi forum,I'd like to create a QoS class/policy map for VoIP traffic to steer the traffic to a priority queue. I'd like to configure this such that traffic with DSCP EF *and* to/from specific IP addresses are matched. It isn't clear to me whether th...

Resolved! FWSM on 6513 switch

Dear All,We have FWSM on 6513 core switche, we configure it in routed mode without natting (by just typing "no nat-control" command). Now i face a problem which is, the users in the inside interface can't access the Internet although i can ping any I...

connect to standby ASA

Hello, i have 2 5520's running active/standby. How do i connect to the standby unit to load a IOS upgrade with zero downtime? I can ping my standby ip address from the primary/active unit but obviously cannot telnet from there. can i only connect to ...

how to monitor standby FWSM unit status remotely ?

When two FWSM module works in Active/standby mode,it seems that the standby unit is invisible,how can I monitor its state remotely ?

Port redirection in transparent mode ASA

Hi all,Is it possible to do port redirection in transparent mode ASA..??Please helpThanks

Query - FWSM Security Levels..

Hi, I have two vlans defined on the FWSM, APP and DB, For the APP vlan, Sec level is 60 for DB it is 100. I wanted to allow multicast from APP to DB and Vice Versa. The necessary NAT statement and ACLs are updated and connectivity is working from D...

Resolved! Has anyone seen this connectivity issue before behind an ASA5510

I have a network with a 2950 C switch set up with 2 Vlans a Data VLAN and a management VLAN. There are 2 separate uplinks to the ASA, one for each VLAN. The problem is that servers that are on the Data VLAN periodically drop their connections to ea...

Resolved! PIX 515 7.2(1) always reload

Hi All, I have a big problem, I hope you can help me here. Since yesterday, I found out that my Pix Firewall keeps reloading until now. Is there someone out there experience this thing? Please help!!many thanks,reymon

Network Security

Forum Posts

ASA 5505 stop working

PIX Reboot Daily 6.3(3)

NAC SSL certifitcate - Internal CA vs. 3rd Party Cert

Phantom Connections on FWSM

ASA: Logging reachability events for "sla monitor" / "track"

"match not request" in MPF configuration

Resolved! CSC-SSM: HTTP scanning enabled and Citrix

class-map with DSCP and to/from specific IP address(es)

Resolved! FWSM on 6513 switch

connect to standby ASA

how to monitor standby FWSM unit status remotely ?

Port redirection in transparent mode ASA

Query - FWSM Security Levels..

Resolved! Has anyone seen this connectivity issue before behind an ASA5510

Resolved! PIX 515 7.2(1) always reload

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

Congratulations to the July 2022 Spotlight Award winners!

CBAC in IOS-XE on ESR 6300

Configure external access

error in encore estreamer FMC connection

is there a tool to automatically input policy to Firepower?

What does (MAX) mean in the "show pmon state" command output?

Licensing for ASA with FTD Image

Control-plane ACL on Firepower 4110

New WAN outside interface doesn't work!

Adding Cisco FMC with already configured Cisco Firepower Firewall

ASA Transaparent mode use of subinterfaces