I have an ASA 5540 with AIP-SSM20. I use Gi0/0 for DMZ1 and Gi0/1 for DMZ2, then I create two virtual sensor: vs0 and Vs1. Could I use policy-map to force vs0 to protect servers in DMZ1 and vs1 to protect servers in DMZ2?Thank every one alot !
Hi,Wanted to know can I add AIP,CSC10 etc. module to same hardware.i.e Having a 5510 bundle with me.My need is to add Anti-x/Antispy,URL filter and IPS.I was made to understand that all features won't run on the box,can run Anti-x or URL but not both...
Hi allI want to know what is the basic difference between the following logging levels if i want to set up the following email notifications .ie how is the logging level different if specified after recipient address with the one specified after "log...
hello,My ASDM 6.1 (3)Fin FWSM is not loading at all. It authenticates but does not load the ASDMI tried 3 different systems, downgraded Java version as well as used ASDM-IDM launcher, it will try to load but ASDM will never loadI am trying to upgrade...
Hi guys,I have looked over my config and gone through several cisco helpsheets, I still cannot access the outside from "inside" the dmz. Here is an overview of what I can and cannot do.OUTSIDE >>> DMZ = OKINSIDE >>>>> DMZ = OKDMZ >>>>>>> INSIDE = OKD...
Hello,I am trying to establish a direct connection to devices behind the firewall without NAT.I have an ASA5510 FW where both sides are private IP addresses. outside interface is Security level 0 and the inside interface is Security level 100.I have ...
Hi,If we need to access single "inside" server (10.1.1.1/24) from two different static IP address from two different ISP2.For example 10.1.1.1 --> IP1_from_ISP1also 10.1.1.1 --> IP2_From_ISP2This is to achieve ISP level redundancy.Is it ...
Dear all,I encoured stateful issue in a ASA 5520 architecture displayed on the drawing attached.This is a LAN based active/standby failover link between a pair of ASA5520 (version 8(0)4). Stateful and failover use the same ethernet link (dedeicated V...
greetingsI have a pix 515 been running for years. last two days under some load the PIX just rebootsive donesh xlate countsh conn countsh memturned logging on for critical onlyruns fine then,...whomp. it just reloads, like it dumps it's memory and re...
My customer has an asa and want to do aaa authentication tacacs+. The ACS server however is accessible through an ipsec vpn tunnel terminating on the outside interface of the ASA.Whenever a user logs into the ASA the request will be send out via the ...
This is a separate question that is a follow up to one that was answered:Help with: Deny TCP (no connection)https://supportforums.cisco.com/thread/2016571Unfortunately that solution - by PATing all source addresses coming in from the outside to ensur...
Hello.We are investigating a problem with unreasonably high CPU utilization, with one of our FWSM modules in a 6509-E. This is a newly implemented module with practically zero traffic passing through it but still, the CPU is at 20-22%. Here's some in...
Hi,I have an ASA 5510 that was originally setup with no VLANs. I have a SIP telephone system on the inside interface. I have now added two sub-interfaces to the inside interface for seperate VLANs as shown below.!interface Ethernet0/0 nameif outsid...
Hello,I have a question about a migration NAC Appliance 7.0 version in L2 OOB deployment to L3 Real-IP Gateway.Do I need any other issue to this or I only must change settings on CAM in "Clean Access Server Type"?I don't have a lab to test it.Kamil,
