Dear all,I encoured stateful issue in a ASA 5520 architecture displayed on the drawing attached.This is a LAN based active/standby failover link between a pair of ASA5520 (version 8(0)4). Stateful and failover use the same ethernet link (dedeicated V...
greetingsI have a pix 515 been running for years. last two days under some load the PIX just rebootsive donesh xlate countsh conn countsh memturned logging on for critical onlyruns fine then,...whomp. it just reloads, like it dumps it's memory and re...
My customer has an asa and want to do aaa authentication tacacs+. The ACS server however is accessible through an ipsec vpn tunnel terminating on the outside interface of the ASA.Whenever a user logs into the ASA the request will be send out via the ...
This is a separate question that is a follow up to one that was answered:Help with: Deny TCP (no connection)https://supportforums.cisco.com/thread/2016571Unfortunately that solution - by PATing all source addresses coming in from the outside to ensur...
Hello.We are investigating a problem with unreasonably high CPU utilization, with one of our FWSM modules in a 6509-E. This is a newly implemented module with practically zero traffic passing through it but still, the CPU is at 20-22%. Here's some in...
Hi,I have an ASA 5510 that was originally setup with no VLANs. I have a SIP telephone system on the inside interface. I have now added two sub-interfaces to the inside interface for seperate VLANs as shown below.!interface Ethernet0/0 nameif outsid...
Hello,I have a question about a migration NAC Appliance 7.0 version in L2 OOB deployment to L3 Real-IP Gateway.Do I need any other issue to this or I only must change settings on CAM in "Clean Access Server Type"?I don't have a lab to test it.Kamil,
Hi Gurus,My webserver is not able to access from outside the network. Also cisco vpn is not acceepting any connection.For Webserver internal address is 192.168.1.2 => 64.168.82.251My configuration is given below, please help: Saved:ASA Version 7.2(4)...
Hi, whats happens in ASA 8.3 if you have two NATs with the same origin (i.e 192.168.1.3) and different outside (i.e 10.10.10.5 and 10.10.11.5)?. In older release of ASA it works by position in list so the first NAt is the first applied. Works in ASA ...
I've just started using IME, and it appears as though the log files for reports and events aren't stored on the SSM, but are actually stored in IME. If this is the case, do most of you leave an instance of IME running all the time? What are you doing...
I've got a pair of ASA firewalls that are accessed via a SOCKS server, so all management sessions to it is from this one ip address. The firewalls are running OSPF and learn the route to the SOCKS ip subnet via OSPF, so we are unable to directly acce...
Hello,I have added all the devices into CSM 3.2. However, I am not able to launch the device manager. Going thru User Guide for Auto Update Server 3.2.2, I foundhttp://cisco.biz/en/US/docs/security/security_management/cisco_security_manager/auto_upda...
Hihttp://www.cisco.com/web/strategy/government/security_certification/net_business_benefit_seccert_common_criteria.htmlShows that 7.2(2)27 is the EAL4 compliant version of ASA software. However this doesn't seem to be available for download in that t...
Hello guys.I have asa5510 sec plus.Im new to cisco.WAN IP: 77.68.136.96 - 77.68.136.102Is it possible to send traffic from internal host like: 192.168.10.31 out through another WAN ip than the one bound to interface "outside" ?I tried it with this co...
