Hello:I am redesigning my ACL's. I have a dumb question for the "outside_access_in" ACL. This ACL controls traffic from the outside in. Servers which are in my DMZ are on a private range and the ASA is doing a static NAT for them. As I create the...
Hi Guys I have an ASA 5510 running 8.0 code.I was experiencing slower throughput then normal and decided to do some testing on the firewall.I had a redundant interface for the inside of the firewall with ports e0/2 and e0/3. both configures to 100/FU...
Please help me understand the asterix (*) symbol seen in below rule (highlighted) besides the hitcnt keyword.access-list server_input_in line 34 extended permit tcp host 192.168.100.1 host 192.168.300.4 eq ssh (hitcnt=*)Hitcnt should show certain num...
Hi,Is it possible to do nat on firewall with nat on udp ports. if there are certain servers running service on udp port , will external access work ifwe configure nat for udp access.Thanks!
Hi AllJust wondering what is the best way to handle VPN site to site redundancy?Say for example I have Site A (main site) and Site B (remote site). If the WAN link for some reason fails on Site A I need it so that Site B would use the Wan link of ano...
in NAC L2 OOB per my understanding, a node coming online gets put in the untrusted network for the authentication/validation before going "out of band" or out to the regular subnet. As far as Quarantine Role for remediation, does there need to yet be...
ForumI was attempting to configure a static NAT statement on a clients firewall which is running code version 8.3.1. I got a message indicating that the old static command had been deprecated, and that the "nat"command needed to be used instead.What...
Good morning support,We had some ASA 5505 and 5520 and would like to send flow statistics to a netflow collector. is it possible with models 5505 and 5520 and with Version 8.0?Thanks and regardsFran
Hi all,User A can login into server B via RDP (tcp 3389) however he cannot copy the file from server B via remote desktop.He also can ping and do a traceroute to the server.When I do a testing with him, I’ve found out the following message on ASA. Th...
Unable to access DMZ host from inside network - can ping inside interace of ASA from inside network - can ping dmz interface of ASA from dmz host (test laptop configured with dmz ip address) - can ping inside network from ASA - can pi...
I currently have an ASA5510 in routed mode with an AIP-SSM-20.There is a requirement to use a fibre optic connection between this ASA and another ASA across campus, so the AIP-SSM will have to be removed and replaced with the SSM-4GE. This part shou...
how to configure the below mentioned ports for the mentioned IPs of webroot proxy on the PIX firewall, so that all inside host should have their browser to use the proxy server, and get to browse the internet after authentication. They will not be ab...
HiIf I upgrade to ASA 8.3.X with ASDM 6.3(1) and the ASDM Launcher updates to v1.5(49) from the current v1.5(30) , will the old ASDM versions (say 5.2) support the new launcher ?
Scenario: I need help setting up a “Business to Business (B2B)” connection from a vendor to host facility (may also be called a shared IPSEC Tunnel?). I want to add this new tunnel configuration without impacting the current setup on the PIX. Not tha...
Hello,,I have FWSM with OS 3.2Is it work to have PAT from interface with lower security level to interface with higher securuty level?I have this config and it doesn't workinterface Vlan10nameif DMZ_1security-level 30ip address 10.10.4.1 255.255.255....
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 11-10-2025 11:45 AM | ||
| 11-03-2025 09:48 AM | ||
| 10-31-2025 12:20 AM | ||
| 10-30-2025 12:44 PM | ||
| 10-23-2025 07:14 AM |
| User | Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 |
