I've been researching what my options are for capturing logs remotely. Any comments are appreciated.1. Syslog to a syslog server in cleartext over the internet is out for obvious security reasons.2. Site to Site vpn to a syslog server is possible, bu...
Hello,I am having problems with a FWSM with multiple contexts implementation.One of the contexts has a inside interface that must have a EXPLICIT deny ip any any.The problem is:When I put the ACE with the explicit deny at the end of the ACL all the t...
Hi , I have a quick question regarding the ASA-5585 with 2 10Gig port IPS module. When the IPS module runs a separate application from ASA and the traffic between the ASA/IPS is flowing in the back plane, what is the use of having two 10 Gig ports o...
Need to configure HSRP in routers, But in ASA i have only one gateway ROUTER 1-->ISP1LAN --->ASA--->L3----> ROUTER 2--->ISP2in the above setup explain,In ASA, 2 interface used ...
Hi,i have a Cisco ASA 5550 with firmware version 8.2.I have read the documentation about the static routing tracking feature.Is this feature working if i set two static routes with different metrics to the same destination subnet, but one route is ap...
Hello All, I am New to the ASA/IPS world,and i have a few questions.We are buying two ASA5520's with IPS Modules(aip-ssm-10) for a new location, I plan on running them in active/standby. These will be my first set of ASA5520's.My Network design for t...
HelloI tried to seach, but I did not find correct solution to my problem.I haveCisco ASA SEC PLUS running in Main office AOutside interface- default ISP InternetInside interface - default local lan. 192.168.1.0/24DMZ interface - other external networ...
Hello,I have a Cisco Pix 515r with a VPN set up.I have 4 remote users from the same location trying to connect to my VPN. It appears that only one can connect at a time. I believe this is an issue on their side not mine. But since I'm "somewhat" f...
Were trying to use our polycom VC through our ASA 5510 but everytime someone calls in we see a Deny Outside_in destination port 1720 tcp in the syslog.It doesnt make sense as we have all the following ports open on the outside interface (H323 coloum)...
I would like to create exceptions within particular signatures to ignore IP addresses. How do I perform this task?
Hello,I have just setup a new ASA 5520 with 8.3 OS. I have it setup very basic with 3 interfaces; outside, inside, and management. I have it setup so any users on the inside can get to the internet on the "outside" with Dynamic NAT. However I a...
(Addresses are made up)I have a Multicast server (1.1.1.1) that is multicasting out on address 224.1.1.1 on an interface called CLAN . I need this mutilcast to be routed out of the inside interface to a client on the internal network.The mroute comm...
Hello everyoneI am about to upgrade a NAC from 4.5 to 4.8 on an implementation that I make in a bank with 1500 users. The upgrade is due because the bank is migrating from PCs to Windows 7The implementation is in Failover (2) CAS and (2) CAM. the des...
I would be cool to see a repository of custom IPS signatures end users have created and want to share with the community.Such as how Cisco does with EEM scripts...
Does any one know what constitutes acceptable password characters on version 7.0(4)E4 of the IPS Software?I'm in the process on testing the sensors with RADIUS authentication against ACS version 4.2. ACS backs of toMicrosoft AD for accounts and passw...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-31-2026 07:29 AM | ||
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM |
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
