Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Resolved! When no nat, how come it does not route?

Hi,Trying to get my asa 5505 to route between outside, dmz and inside without using NAT as all networks are internal. With NAT it works perfectly, but when removing the nat rule of inside then the inside network cant reach internet (nor the /24 on th...

fail-open on ips 4255

i have a query regardin bypass. Suppose i have a hardware failure or power supply down for IPS , do IPS 4255 bypass the traffic by default or we need to add some extra hardware .thanks for your input

CSC v6.3 and end user app updates

hi!having CSC v6.3 issues again... this time it's end user programs (such as iTunes for example) that auto-update. They do not work thru the CSC. We opened up all our policies and disabling scanning or excluding the traffic from the CSC would permit ...

CSC v6.3 and Remote Agent Mapping Issues

Hello!We are getting an issue (our AD is a Win2008 64-bit server, BTW) where the mappings using the remote agent will work for about a day, then a group of users; random at best... starts mapping to the default policies and the log shows the user IP ...

Resolved! Using ASDM on 5520 how do you allow only a range of ports 8900-9100

Am a very novice.Have set up the security rules and can pass and block devices by IP address but want to further limit to only a range of ports to go through and can't seem to find anywhere in documents that talks about how to do this.

White list for live web chat program to work ?

We have just had a new ASA5510 installed and i'm trying to get a live web chat programe to run.I have contacted the web chat providers and they have said i need to whitelist:*.providesupport.comandds.ds2ps.net ds.ds3ps.co.ukIs this an easy thing to ...

failover exec does not work in context

Hi,asa01/admin# failover exec active show versionCommand authorization failedasa01/admin#When I type this command from any other context it works fine. TACACS is defined in the admin context.I am having issues in connecting with the second ASA FW.Bef...

Ideas for vendor workstation isolation

I have to install a vendor workstation on our network that I would like to isolate from the rest of our WAN. The workstation does not need to connect to any of our systems and only needs to be able to make a vpn connection with the vendors equipment....

IPS inline Fail

Hi,I have configured the IPS appliance for inline VLAN pairing. What will happen if the IPS appliance powers down?Will the traffic flow correctly without inspection?BRAdi

IDSM CPU 1 High Probleme

Hi everyone.My name is wan tae kim in korea.I have the question to idsm problem.Is using idsm by ips mode in our customer.Cpu1 will be continued in 100% state but does not know cause.Is used by Inline mode but need Configuration verification.I want t...

Resolved! How to open 2 ranges of ports in a 5510

I'm new to Cisco and am unsure that the posts I've seen answer my question, so I thought I'd ask it directly:We have a ASA5510 version 7.0(8); our public ip is 216.220.232.224How can I open TCP ports 3230 - 3243 and UDP ports 3230 - 3285 for 192.168....

Resolved! Configuring IPS on Cisco 2921

Hi,Is there a design guide for how to configure IPS on a Cisco router and how it should be best implemented (2921) ?Regards,Laurent

2 ASA 5510's and multiple internet connections

We have implemented multiple ASA 5510's. One with the AIP module and the other will have the CSC module. We have two bonded T1 lines but we want to implement a faster internet connection .Here is the reason we would like to implement a faster connect...

DNS Forwarders on ASA 5510

Is it possible to add our ISP DNS forwarders to the ASA 5510 Config??If it is, what command would I be looking at inputting?Thanks in advance,Monster

Resolved! Pix Firewall 515e

Hello,I have a client with PIX 515e that is licensed as Failover Only Active/Standby. The main firewall is completely dead. I can get things up and running again by failover active command but after a reboot or after a period of time it goes back to ...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Resolved! When no nat, how come it does not route?

fail-open on ips 4255

CSC v6.3 and end user app updates

CSC v6.3 and Remote Agent Mapping Issues

Resolved! Using ASDM on 5520 how do you allow only a range of ports 8900-9100

White list for live web chat program to work ?

failover exec does not work in context

Ideas for vendor workstation isolation

IPS inline Fail

IDSM CPU 1 High Probleme

Resolved! How to open 2 ranges of ports in a 5510

Resolved! Configuring IPS on Cisco 2921

2 ASA 5510's and multiple internet connections

DNS Forwarders on ASA 5510

Resolved! Pix Firewall 515e

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Traffic Being Blocked by Rule in "Pending Rule Order"

FTD SSE Connector Service down

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Using FlexConfig to change default command (no sysopt noproxyarp) rule

Trying to enable AnyConnect Alias

EU compliance certificate Firepower 1010 NGFW

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC