Hi halijenn / experts ,I have configured outside NAT on an ASA so that the traffic is sourced from public IP on the internet to be NATTED to a private IP on the inside.Following is the error Asymmetric NAT rules matched for forward and reverse flows;...
Hi halijenn / NT / MagnusI have a query on "Deny TCP Reverse path check " . Logical interfaces are configured on the Firewall of which physical interface Gig0/0 is not assigned any "nameif". The logical interface Gig0/0.1 is "inside" interface [sec l...
i would like to get some idea for IOS IPS signature update.example currently the router fresh install using IOS-S416-CLI.pkg, IOS category ios_ips in advanced mode, with retired false.Just wonder what if next time download and loading with latest pat...
Hi halijenn / NT / MagnusI have 2 server one on outside and another on inside of the firewall . The issue is that the server on inside (10.251.12.1) is able to communicate the server on outside (10.253.9.14) however the vice-versa is not happening .T...
Hello,I am new to the Cisco model so excuse my lack of wisdom with this product. I work for a small rural Hospital and we need to FTP a report once a month to a clearing house. Problem is I can't FTP their site, I can others but not theres. I was ...
Can someone please give me an idea how to do this, I have a program inside that needs to email me reports.inside address 172.16.1.20 to am SMTP on the internet.
Does anyone know how to reset a c100 IronPort to it's default settings? I lost my passwords.
I have setup an inbound ACL on the outside interface of my router that allows TCP ports 20 and 21 in and I have a CBAC inspect map with FTP specified on the same interface in an outbound direction. My understanding is that the inspect will check al...
I'm trying to write a regular expression to block files with the extension of .lnk, but I can't get the end of line anchor ($) to work. So far I've come up with "\.[Ll][Nn][Kk]" and that blocks "test.lnk" but it also blocks "test.lnk.txt". I tried ...
Hello,I'm receiving frequently this message from ASA SSM-10 module regarding the update of antispyware. The message is as below:"GraywarePattern : Pattern Update: The download file was unsuccessful for ActiveUpdate was unable to unzip the downloaded ...
I want to allow a system in the DMZ (75) access to adatabase server in a higher security (100) and also still allow the server in the DMZ access to the internet from inside.From the inside out to the internet works fine unless I change the access rul...
Hi All,After battling with, and eventually learning from the ASA 8.3 NAT configuration, I have stumbled over another hurdle which is causing me some confusion.I have PAT working quite well for one host. That is, OUTSIDE:2202 ---> INSIDE_HOST:2202. Se...
I have two FWSM's in an active active configuration. Both are currently on version 4.0(6). I would like to upgrade these one at a time. Is there any problem with upgrading one to 4.1(2) then waiting a week till I upgrade the second one. I always worr...
I have a Cisco ASA 5505, and I'm trying to forward HTTPS traffic to one internal server if it comes from either of two external networks (i.e. X.Y.0.0/16 and C.0.0.0/8), and to a different server if it comes from anywhere else. Can anyone provide me ...
Has anyone came across issues with icmps on the ASA running on the 8.3 (1) code? I've been trying get inside hosts to ping external hosts but coming back as no replies? I've made changes to the inbound access-list and even turned off "inspect icmp" ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 09-30-2025 03:35 AM | ||
| 09-26-2025 12:33 AM | ||
| 09-24-2025 06:11 PM | ||
| 09-23-2025 04:54 AM | ||
| 08-29-2025 08:17 AM |
| User | Count |
|---|---|
| 12 | |
| 5 | |
| 2 | |
| 1 | |
| 1 |
