Hi,Few questions on ASA:1. one of asa has logging enabled for warning & information message. logging enablelogging buffered warningslogging asdm informationalwhen asdm logs are seen, it shows normal teardown etc. for traffic. but sh log gives lot ...
Even though AES has theoretical advantage over 3DES for speed and efficiency in some hardware implementation 3DES may be faster where support for 3DES is mature.http://blogs.msdn.com/b/ace_team/archive/2007/09/07/aes-vs-3des-block-ciphers.aspxI have ...
Hi Friends,I am confused between DPD and Keepalive??How is working of PFS?Please help to share..
We have ISA Server which is setup to restrict particular domain groups controlled access, three groups in all (basic-minimum, intermediate-normal and advanced-maximumIs there a way to replicate this setup on our ASA5510E.g. We have an Object group se...
when I do any changes on firewall, I get following error in logs,it gives me message that below parameters are not updated in firewallset ike ikev2 initiator-send-dummy-ipsecset ike ikev2 ike-sa-soft-lifetime set ike ikev2 stateless-cookie-threshold ...
Hi everybody, last week I had a problem into my network, now is working fine, but I want to know if you can help me to know what was the possible reason for that problem and which of my actions was the one who fixed the problem, and/or if it can pas...
Hi,We recently upgraded our FWSM from version 2.3 to version 4.1, without the intermediate hop to a 3.x version first. We were advised by a Cisco representative that this intermediate upgrade to 3.x was no longer necessary.Overall, the upgrade appea...
I'm trying to enable the top ten services feature using asdm 6.34-53 and get the error in the attached graphic.I assume this means threat detection is not compatible with this feature? Is there a way to work around this?
Hello,Recently I've been supporting a branch site ASA 5505 v 8.3 that has the following site to site vpn configuration details (the site is not meshed, just a single connection back to the hub site):access-list outside_1_cryptomap extended permit ip ...
There are various links posted by support personnel in the "Ask The Experts" discussion that I cannot access. A few examples:http://www.cisco.com/en/US/partner/docs/security/ips/7.0/configuration/guide/ime/ime_getting_started.html#wp1233087http://www...
Can somebody help me to get brief information on the below signatures. DCERPC: Frag Length Overly Long-0x47600a00 TCP: ACK Host Sweep-0x40009c00NETBIOS-SS: Guest Login Succeeded-0x4070a500 NETBIOS-SS: NULL Credentials Login-0x4070a400 DCERPC: Spoolss...
Hi all,I have this configuration:interface Ethernet0/0 nameif outside security-level 0 ip address x.x.x.x 255.255.255.224 standby x.x.x.yinterface Ethernet0/2 nameif dmz security-level 95 ip address y.y.y.y 255.255.0.0 standby y.y.y.zEthernet0/0 is a...
Hello Everyone,I have a ASA 5550.I need to configure three points:• Automatic Backup(if it exists).• Log shipping to a syslog server(it server can a Cisco Works version 3.2?).These points can help me?The configuration of sending logs to a syslog serv...
Hi Guys,We have a Cisco Catalyst 6500 with a FWSM running V 4.0(6)We have noticed that when we apply new rules into the ACL (through ASDM or CLI) that after the ACL is applied,the CPU sits very high (90-100%) for up to 20 min.During this time, the ne...
I currently have a site to site tunnel configured between a Pix 515e and ASA 5520. I am currently tunneling traffic from two interfaces on the ASA 5520 to the Pix 515e. Does anyone know if you can tunnel traffic from the Management 0/0 interface of...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 10-24-2025 02:59 PM | ||
| 10-24-2025 02:01 PM | ||
| 10-23-2025 07:14 AM | ||
| 10-21-2025 08:39 AM | ||
| 10-20-2025 12:53 PM |
| User | Count |
|---|---|
| 11 | |
| 5 | |
| 2 | |
| 1 | |
| 1 |
