Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Static Nat DMZ WEBserver to outside interface keeps failing

Hi,This the part to the previously problem thread I posted.I have finnally upgraded to version 724 both IOS and ASDM have now isolated the fault to NATing.Its quite funny as the ISP utilises a POE time connection with login credentials set on their R...

Resolved! ISR IOS Content Filtering (URL Filtering) Local

Dear All,Would you please advise wether it is abligatory to have the content filtering subscription license in order to use the local (static) content filtering on Cisco ISR? Documentation says that one can use the local router URL database (whitelis...

PIX515E Failover issue

can anybody help me with the basic configuration for connecting Two PIX 515E firewall in failover mode (Active-Active)?

CSC-SSM Update issue

HI Can you please help me how to fix the below file update issues in ASA CSC module. Virus pattern 7.361.00 was successfully downloaded and installed.Anti-spam pattern 17550 was successfully downloaded and installed.Unable to copy file . You must m...

Changing a sub-interface to physical

Hi,I wondering what is the best practice when changing a sub interface to physical interface?Currently my "Outside" interface on an ASA 5550 (8.2) is assigned to a sub-interface. Due to a VoIP project it is a requirement that a priority queue is conf...

Resolved! Denied Traffic

We have a put an ASA5505 between us and vendor. There are only a couple of servers that sit behind this ASA5505 that will talk to vendor. We have a link setup to the vendor using the outside interface with a 10.10.2.x/30.The inside network is 10.10...

Resolved! Preempt-Active/Standby

HiIs the preempt option available in active standby ASA firewall setup with single context...somewhere i have read that same is available in active-active setup or active/standby setup with multiple context..any supporting doc fo the same if avialabl...

Resolved! configuring accesslist in a multisite vpn environment

Hi all,I have successfully setup a multisite vpn environment, one that is similar to the link below.http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00804675ac.shtmlMy HQ office which is accepting site to site...

Cat 6500 FWSM upgrading from Sup 32 to Sup720

I have a customer who has an existing Cat 6500 Sup 32 with a FWSM and wishes to upgrade to a Sup 720, If the existing IOS switch config is pasted back onto the Sup720, will the FWSM need to be reconfigured? The existing FWSM hardware = WS-SVC-FWM-1 S...

cisco asa 5510 limit size of data

dear all,I have a topology:PC ------ router ---------- ASA 5510------- Data centerwhen I download a file has a bigger size than 300 Mb from data center, when the size of the file reached 300Mb, the connection is corrupted. I think may be ASA limit th...

IPS Signature action not being taken

I recently installed an 891 with advanced ip. I decided to implement the IPS mainly to stop the bruteforce attacks on my ftp server.I read through the documentation and set it up. I think I have it setup correctly except it isn't blocking the ftp fai...

multicontext mode shared interfaces

I am running a multicontext mode on my firewalls, have a shared outside interface. having few problems trying to allow a single user access to external network through the firewall....attached is the diagram for how things are connected, this is just...

Default admin viewer does not have access rights to ASA SSM-10

I am setting up an ASA 5520 with a ASA SSM-10 module. I set up a user on the ASA SSM-10 with administrative privs. I then used that username and password to log into my SSM-10 from ASDM. I was able to connect with no problem. However, I am not able t...

Resolved! Cisco ASA 8.3(2) PAT issue

HelloI have tried to solve it my self, but no luck.I have this setup:ISP modem (no NAT) - Cisco ASA 5505 firewall/router (NAT enabled, 1 external IP address) - local network.I need to forward upto 5 ports to inside nework (192.168.1.0/24). Inside com...