I manage a 500-node LAN with several remote branch offices. We currently have two ASA-5520's in active/standby mode. All internet access funnels thru the home office. Our ASA's currently have 8 10/100/1000 ethernet ports, so integrated module is not ...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(84) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,510) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(139) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Management Center (FMC)
(3) -
Cisco Secure Firewall Threat Defense (FTD)
(2) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,567) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(319) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,553) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,769) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(624) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Resolved! Passthrough Public IPs / NAT Exempt
Here is my scenario. I have a /26 from my provider. I have a server that I want behind the firewall but must have a public IP on it and can't be nat'd. I have carved a /30 out of my /26 and have nat exempted it inbound from the outside and outbound f...
I have just started the process with migrating from PIX to ASA-platform. I have used to pixtoasa.exe-tool several times to convert my existing PIX-config to ASA 5520-config, this has been working ok. But after the last time I reset the ASA to factory...
I have a specific need on our ASA 5510 and could use some guidance.Currently our outside interface accepts SMTP from any source, via an access rule. NAT then forwards the inbound SMTP to an internal email gateway.I now have a situation where I have ...
Hi Everyone,I am about to build a new firewall'd infrastructure in which a significant amount of traffic will be running through it. I need to lock this firewall down as quickly as possible. Since there are no rules in place I will enable a “permi...
Hi There,I have a csamc 6.0 using an external ms sql 2005 server. We have been using the text filtering function for awhile now, but suddenly it is just getting the csamc to its knees when trying to search for ex. a specific executable file in the lo...
What cause this signature to trigger?I am not using any SQL services with host 172.19.107.55, scanned host for worm and never accessed this IP 203.161.77.136 from host.any suggestion?Event ID=1214348868918579818Severity Level=3Device Name=IDSM2CORE1R...
Hi,We are using AIP SSM in the promiscuous mode,And every thing seems to be fine.The only issue i am facing right now is that i cannot see the events which traffic comes from the outside to inside zone.Interesting traffic for IPS is "IP any any" and ...
I'm setting up a pair of ASA firewalls that will exclusively be used as VPN endpoints for about 75 tunnels. All traffic passing through it will be VPN traffic, to which none of it needs to be NAT'd. I'm running version 8.x on the ASAs. Nat-control is...
Hi,I am having an issue with auto update on the IPS module installed the ASA. Auto Update Statistics lastDirectoryReadAttempt = 06:00:34 UTC Wed Feb 23 2009 = Read directory: https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl =...
Has anyone tried this? We want to replace 5510s that are in active\passive failover mode with 5550s. We thought we could do this without an outage by removing the secondary 5510 and putting the new 5550 in its place.
Ok so I've got an ASA 5510 with 8.0(4) installed. The situation I've got is I need to alter the destination of smtp traffic based on the source of the traffic. For example, any smtp traffic coming from 1.1.1.1 needs to be forwarded to 192.168.10.30, ...
Good afternoon guys,I'd like to do a vlan with 2 interfaces and just one IP, can I do it?
Resolved! Post-Failover -- who's who?
ASA 5540's configured for active/passive failover. Primary loses connectivity, failover occurs, Secondary is now active.To the untrained eye, how can you tell which device is the Primary?i.e.If the outage was from something other than a hardware or ...
I have a strange problem, Is there any way to make an ASA 5505 (IOS 7.2.3 12) preserve the DSCP tagging when packets pass through and get NATTEd..Basically I have traffic that my voice cube is tagging as DSCP 46, but when it comes out of the ASA it's...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
