Hi,I'm confused basically I've got an interface on my asa firewall that I need to ensure is locked down via an access-list. My acl will look like this:interface GigabitEthernet0/1.242 description Site2vlan 242 nameif dmz-site2 security-level 58 ip ad...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(84) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,511) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(140) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Management Center (FMC)
(6) -
Cisco Secure Firewall Threat Defense (FTD)
(6) -
Cisco Security Cloud Control
(1) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,567) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(319) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,553) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,770) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(625) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hi,My client has purchased two 2951 router and two ASA 5510. He has taken 10mbps two link of different ISP.His requirement is to use both the links simultaneously. His requirement is to loadbalance two links and ASA is to be configured Active/Active....
Hello,One of our customers have a 4240 IPS on which there is one inline pair and 2 promiscuous interfaces.The inline pair is used between an internet router and a switch on which is connected a pair of ASAs.The problem happens when we connect the inl...
I would like to any ip from dmz to inside or inside to dmz using own ip without NAT, so i type the following sentense to ASA. static (inside, dmz) 0.0.0.0 0.0.0.0 netmask 0.0.0.0however, amost all pc in dmz fail to ping each others and I noticed tha...
Dear All,What the max. users can be handled by PIX 515? ..I am still using PIX 515 (32MB) for 300 users, sometimes I cannot access it..any idea ? or suggestionI need advisethanks & regardsWinanjaya
Hi,I'm using Plesk as my control panel. After the PIX was installed, I mapped the old IPs to the new IPs.Port 80 is OPEN.My PHP includes won't work when I use the domain, actually nothing works when I use the domain infront of it.Does anyone have any...
Resolved! ACL
Hi,does the ACL rules prevail over the basic rule that traffic can freely flow from higher to lower security interfaces ? In other words : whenever I place an ACL (with implicit deny any) on a user interface (like sec 100), I must specify that trafif...
A Customer Had ASA 5510 with IOS 8.3 & ASDM 6.03 want to use syslog server i followed steps in the configuration exampelhttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#stepsand the customer i...
I have deployed Cisco NAC version 4.7.0.The concept of deployment is that, the user is log in to the network and must get IP from VLAN 18 (works vlan mapping 918->18). When user is successfully authenticated then is refreshing his IP to the appropria...
Hi all, I would like to know if the, OOB deployment for NAC is tied to the SSID or vlan?In my enviroment i have a few different SSID with the same vlan, i'm trying to test out my NAC deployment without affecting prodution SSID. I would like to...
Resolved! ASDM 6.2f - for FWSM 4.1(1)
I'm looking at installing version 4.1(1) on my FWSMs. One thing noted in the documentation is that 4.1 supports ASDM 6.2(x). This would be great, as my ASA devices are already running software that uses 6.2(x). However, I don't see anywhere on CCO ...
hi experts, can I copy the running-config from asa with scp to a linux server ?I was reading the cli-command guide, but the suggested commandline does not work.scp -v -pw password filename username@fwsm_addressDoes anyone know how scp works with the ...
I have 14000 ACEs under one ACL. Actually I want to block whole of the world except North America and Mexico. Any idea how to optimize this list . Any tool
When will Cisco Security Agent 6.0.2.* be available?
I have NAC configured and running in an OOB deployment using Window SSO. Most users authenticate into their computers and then NAC does the login and posture assessment using SSO and those credentials.We have a few users that have the Clean Access Ag...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
Top Solution Authors
| User | Count |
|---|---|
| 11 | |
| 6 | |
| 4 | |
| 3 | |
| 1 |
