Hi,We're having a debate with our hosting provider over what is and isn't posible using PAT on an ASA 5000 series firewall with active failover.Basically the scenario is that we have a range of host IP addresses, two in particular are of interest123....
Hi,I am using an ASA between our organisation and another. This link is used for many things, including http. If I browse to the actual IP of the server I have no problem - http://20.1.1.20, however if I configure destination NAT, so the web server i...
Can I PAT port groups to two internal IP's? For instance, I want my single external ip to be PAT'ed to 10.10.0.15 using tcp range 50000-50010 and PAT'ed to 10.10.0.16 on udp range 6004-6999. I have not been able to find a solution other than creati...
Hello Cisco Experts,I have a question about the Global ACLs feature introduced in ASA 8.3.Which ACLs are match first, Global ACLs or the regular interface-base ACLs?As I understood, if both Blobal and interface-base ACLs exist in the policy, the fire...
Dear all,I have a problem with a Cisco ASA 5510 ver. 8.0(4).It is connected to another ASA in a failover configuration (active/standby). Now failover is not active and I can't connectto the standby unit even with console cable.I tried to connect on m...
Hi,I have an asa 5510 new box with 8.2.1 with no config. Can I go ahead to down grade it to the version 7.0.x directly without down grading to an intermediate image ...ThanksRichard
Hi,I deployed a Cisco 4260 IPS in promiscous mode and when i connect the sensing interface cable, the IPS reboots automatically and hangs. When i remove the cable, it is working fine. I re-imaged the software to the lastest (7.0(3)). Even after imagi...
Hi Guys,I know this can be done on other firewalls which support source based routing, but I was wondering if its possible on an ASA to have two active ISP connections? So for example if I wanted to force Network A's Internet traffic(which could be a...
Hi folks,If you could please advise me on this problem urgently, I'd be extremely grateful. I am trying to get an ASA5510 to work in multiple context transparent mode, and I keep coming up against the following issue.I have one logical network, 10.1...
Hi,I am configuring a NAC appliance for Out-of-Band Virtual Gateway model. After the initial configuration of my NAC, am running a test by managing a port. When i connect my system to the managed port, it doesn't change the VLAN to the authentication...
I have a pix 535 running 7.2 code and I'm trying to update it with 8.0 code and I get an error while doing it via the asdm:error occured in uploading the file:server returned HTTP response code: 413Any ideas?
Hi,I'm reconfiguring my PIX 515E from scratch and am unable to get out to the internet. I can ping around my internal network. I can also ping the outside interface (x.x.148.213 - provided by my ISP) as well as my ISP's next hop (x.x.148.214). It'...
Hello Experts,Just had a quick question regarding ASA failover: Is it possible to have an ASA pair, with the primary ASA being a 5540 and the standby device an ASA 5520 (or vice versa)? I need to replace a set of ASA 5540s with with ASA 5520s on our...
I set the enable, http, and console authentication on an ASA5510 to LOCAL,but did not configure local users. Now I can't log into it with the original crendentials. Fortunately, I did not save the configuration to flash so I could always power-cycl...
