Hi,I have ACL_INSIDE to restrict all traffic from inside to outside.I want to allow VPN Traffic from inside to outside.Do I need to have NAT statement for all LAN IP. Example:-NAT(inside) 1 192.168.1.0 255.255.255.0
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,621) -
Cisco Bugs
(54) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(149) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(40) -
Cisco Secure Firewall Management Center (FMC)
(226) -
Cisco Secure Firewall Threat Defense (FTD)
(276) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(19) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(46) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(14) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(264) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(37) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,579) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(324) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(93) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,590) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,790) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(644) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Resolved! VLAN Access-map Logic
Hi Guys,Can anyone tell me what happens to the respective traffic if I have the following configuration?I am a little confused between the action forward/drop and permit/deny meanings?vlan access-map TEST 10 match ip address TEST-ACL action forward!v...
Hi guys,i'm planning to do an IOS IPS configuration on a newly purchased 2851 router, the spec as below:CISCO2851-HSEC/K9CISCO 2800 AdvanceIPservice :Version 12.4(15)T1064MB CF default512DDR DRAMMy problem right now is,when i tried to configure the I...
I have an ASA5505 with 8.2.1 firmware version and 6.2.1 ASDM version. I cannot access the firewall using HTTPS (ASDM). When I try to access it from IE, the message "The page cannot be displayed" is returned. When I try to acccess it from Mozilla, the...
Resolved! NAC Questions
We have 2 CAS should be configured with HA are located in the WAN Zone of the FWSM. there is a static NAT meansstatic (inside,WAN) 10.0.0.1 10.0.0.1 netmask 255.255.255.255where 10.0.0.1 is the ip of CAM and the cas has 20.0.0.1.I have read that if t...
Resolved! NAC with CA
Is it necessary to use the CA with NAC.if we donot use it what is the impact on the users.Can we deply without CA without any problems
Resolved! Default Password for FWSM
Anyone know off hand what the default enable password is for the FWSM?
Hi all,I'm looking for real-world numbers on ASA performance and am having trouble finding them. Can anyone comment on how many packets per second their ASAs are running on each interface? I ask because I recently upgraded 5520s to 5550s but I'm no...
Resolved! ASA lan-based stateful failover question
I have a pair of ASA 5510 with security plus license. I am going to setup site-2-site VPN on them in Active/Stanby configuration STATEFUL failover. I WILL NOT BE USING ANY 802.1Q. I will be running ASA 8.2.1 code.The ASA5510 comes with 5 interface...
Hi! expertsI using AIP-SSM-10 module on ASA 5540But it is not working auto update signature.So I `m going to attach " show statistics host" result.Can you tell me some help?Thanks in advanceAuto Update Statistics lastDirectoryReadAttempt = 07:34:50...
Hi!I'm trying to configure ASA 5505 to pass FTP connection to Win2003 IIS FTP server on port 58158. Works fine with port 21 but not any other port.I get : 227 Entering Passive mMode (192.168.1.10,142,158)The server sent a passive answer with a non ro...
Hi EveryoneDoes anyone know if there is a known bug in ASA related to Object-Groups/Names/Access-Lists with a "Dash" _ or "minus" - inside it? Ex: WINDOWS_SERVERS, FROM-OUTSIDEI have noticed that no configuration is displayed with the command:show r...
Hello all,Do you know if there is a way to deny trafic through a CISCO ASA for all non-domain users?Or do we have to use a NAC system ? (and, if yes, what kind of NAC system?)Many thanksregards,
Hi , I have a customer which has a PIX 6.x .We added an internal network behind another router . Clients have the pix as DG , and we wish not to chage it . We've added routing info on the pix and set the PIX as DG of the additional router . We kn...
i just new asa5510 and configure it with these give inside and outside interfaces ip and security level commands and commandshttp server enable http 0 0 isidebut i cannot access asdm webpage
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 05-05-2026 09:59 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 3 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
