Network Security

Resolved! show mac-address-table on ASA 5540 ver8.2(2)

according to documenatation, show mac-address-table should be valid EXEC mode command.what am I doing wrong?isdevfw00# show ver | inc Version Cisco Adaptive Security Appliance Software Version 8.2(2) Device Manager Version 6.3(1)isdevfw00# show mac?E...

Resolved! Help with Risk Rating calculation

I'm trying to understand the risk rating calculation on an IPS4240 sensor. From what I can tell, it looks like there are some additional parameters added to the equation that are not easy to determine. It looks like the ARR (Attack Relevancy Rating...

Resolved! Replace PIX 515E ver 6.2(2) to ASA 5505

Hello,I have a task of replacing PIX515E ver 6.2(2) to ASA 5505. I have read that I need to upgrade PIX to ver 7.0 before I can just use tftp and move the config to ASA. However, if I dont have an option to upgrade what is the best way to go about it...

Cut-Through proxy and SSH

Hi,I am trying to get cut through proxy to authenticate SSH connectivity. If I use telnet, the firewall will proxy correctly and force local AAA authentication however, when using SSH, the connection is dropped with error :processing uauth_error, ses...

QoS Policing on inbound L2L vpn tunnel possible?

We have an ASA 5505 configured to an integrated T1 that also provide VoIP through Unity Express. The firewall also hosts a L2L vpn with a second site. The problem is that when users download files from the second site, the T1 inbound becomes fully ...

NAT example - Increased Security?

Came across an unusual example of NAT in an ASA recently, difficult to explain but it looked like it was doing a double NAT.E.g.Outside IP 222.222.222.222Mail server 192.168.1.10 (real IP)In the config there were standard nat rules which translated t...

Resolved! Cisco VPN through ASA 5505

Hi everyone,I have a Cisco ASA5505 installed. config is below:pb-gw2# sh run: Saved:ASA Version 8.0(2)!hostname pb-gw2domain-name pshb1.localenable password mjgSKfuQzL4x1LLu encryptednames!interface Vlan1 nameif inside security-level 100 ip address 1...

How many signatures IPS have

Hi,Just a quick question: how many signatures IPS have by default? in IPS7.0.I've noticed some versions with 4700 or 3700, any official number?Thanks,-Dave

Resolved! FWSM bridge-group between two VRF interfaces

Hello, I created two IP L3 interfaces (SVI’s) in a Cat6500 MSFC, each one in the same IP subnet, but in different VRF each. Can I configure a FWSM bridge-group in transparent mode, so that the FWSM performs L2 inspection between these two MSFC SVI in...

Resolved! Cannot Access AIP-SSM in Secondary ASA

Hello all,I have a customer with a failover pair of ASAs 8.0, each with an AIP-SSM. The AIP in the secondary ASA is not accessible via its IP address, so cannot be accessed using IDM or ASDM, or ssh. It can be accessed by sessioning into the module...

PIX515E with FO license: Crypto key gone once pix rebooted

Hi.. i'm facing a problem with my PIX515E with FO license. Each time my firewall reboot, my crypto key for ssh is gone hence i'm unable to use ssh as my remote access method. Is it part of PIX515E FO license limitation? appreciate that someone can gi...

Howto let inside users access SSLVPN on outside

We use a ASA5505 for as a firewall appliance and for users to connect to SSLVPN via the webvpn client. We can connect fine from home but we would also like to be able to connect from inside the firewall to be able to install the client onto new noteb...

Resolved! ASA 5510 - outside and inside can not access web server in DMZ

Hello, there may be some problems with the ASA's config, but I can find where are the problems.Below is the basic config for this ASA:Inside ip address :　192.168.10.1/24Outside ip address: 120.195.153.151/26DMZ ip address: 192.168.30.1/24Web s...

Need help in configuring ASA5505 behind a Verizon Router using static IP

I have MI424WR-GEN2 connected to the internet , and I have four static IP's , I have one static IP for the MI424WR-GEN2 and configured the NAT , protocol any.and did configure the CSA 5505 the outside VLAN with static IP info , the switch say up and ...

Transparent multiple context... where is the problem...

Hello,I try to configure an ASA appliance in transparent multiple context mode. My topology is like this :Router (Gi0/0.101 10.10.10.1) \--- (Eth0/0.101) ASA (Eth0/1.1) ...

Network Security

Forum Posts

Resolved! show mac-address-table on ASA 5540 ver8.2(2)

Resolved! Help with Risk Rating calculation

Resolved! Replace PIX 515E ver 6.2(2) to ASA 5505

Cut-Through proxy and SSH

QoS Policing on inbound L2L vpn tunnel possible?

NAT example - Increased Security?

Resolved! Cisco VPN through ASA 5505

How many signatures IPS have

Resolved! FWSM bridge-group between two VRF interfaces

Resolved! Cannot Access AIP-SSM in Secondary ASA

PIX515E with FO license: Crypto key gone once pix rebooted

Howto let inside users access SSLVPN on outside

Resolved! ASA 5510 - outside and inside can not access web server in DMZ

Need help in configuring ASA5505 behind a Verizon Router using static IP

Transparent multiple context... where is the problem...

CSCwo71835 - The NAS-IP-Address attribute is missing

FMC API to get real time VPN/S2S tunnel and CPU/Memory perf metrics

Firepower 2130 -how to resolve plugin 70658 SSH Server CBC Mode Cipher

Yubikey for authentication to protected applications on FTD

FMC host profile for Cisco UC servers

Application PBR in FDM

SSH with X509v3 certificates

FPR‑4145 EOL/EOS ?

Firepower 4125 - how to resolve plugin 157288,

Cisco FMC QoS filtered by application