I am trying to setup LAN based failover Active/standby between two 5550s. As I was reading a documentation on Cisco website, it is instructed that all of the interfaces are needed to be configured with active and standby ip addresses. I'm trying to...
I read in the book "Cisco NAC Appliance: Enforcing Host Security with Clean Access" (published 2008) that the Real IP Gateway mode is only IPv4 compatible but that IPv6 compatibility will be provided in a future software update.Having searched around...
We have some old systems that use nat-control as they were upgraded from older pix releases.My main question is, if we disable nat-control, what other actions are required?For example, does the firewall needs to be restarted? or Clear all xlate and c...
Hi,Below is my configuration detail which from which I have been having difficulty access the DMZ (webserver)from the outside.thanksasdm image disk0:/asdm-508.binasdm location 192.168.1.5 255.255.255.255 DMZasdm location 192.168.0.0 255.255.255.255 I...
Hi everybody,I have the global service policy enabled on my internet ASA5510:class-map global-class match default-inspection-trafficpolicy-map global-policy class global-class inspect ftpinspect httpinspect bla bla..I just wanna disable the inspect F...
I'm being asked to send logs from an ASA5510 to a syslog server on port 40991 thats behind an interface with a security level of 50.At this point it's not working, the syslog server is 192.168.233.43 and it's behind an interface named APP with a secu...
Hi, we have a Checkpoint Firewall we are migrating to an ASA.One type of access we have, is for groups of users on the "outside"interface, connecting to Servers on the "Inside" interface.These Servers' addresses are NATted, in a way that the users wi...
Hi Team ,We are using the Spectrum (CA) prodcut for monitoring the Cisco IPS logs , suddenly the new oid has come into picture , so can any one let me know the latest oid list for 4260 IPS box. We are using this box in IDS mode.Shridhar
I'm running into a issue with traffic. I have a backup location with internet and connected via MPLS. I need traffic to route to the main location. Do I only add default route to the asa to point to the main ASA network?Or do I add a static nat to t...
Simple question. Do you think it's overkill to secure a single system down beyond the basic outside_access_in ACLs? The situation is one box with ssh, https, and dameware. The 8.3 ACL configuration:access-list INTERNET_access_in remark HTTPS Ruleacc...
I have configured asa 5540 with failover it is in single context and routed mode.Now i want to configure preempt in failover config so that my active firewall should again regain its active status when things become normal after failover.I am aware ...
I am facing a problem with the new ASA fw 8.3 , i am trying to create a port forward that would allow me to port forward from outside to the inside a specific port, but also NAT from the inside, all UDP + TCP established for internet access, but thi...
Hi Guys ,ASA5520 configured A/A in context mode , running on 8.0(5) facing high memory utilization 100%. can anyone suggest the issue and how to reduce high memory utilization .no debug enabled on firewall .there are multiple ACL/Objects configured o...
I have firewall ASA with 8.0(4) version. Everything is working fine but recently we started one proejct which involves upload the files on FTP server located on outside the network over the internet.Other FTP services are working fine but this FTP se...
Hi,I am using Steelhead Mobile to accelerate to my corporate LAN and its not working. I have been told by Riverbed that its my firewall dropping packets with Option 76. i know you can use tcp-maps on the Pix and ASA to get around this, but how do i d...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
