Here is my scenario. I have a /26 from my provider. I have a server that I want behind the firewall but must have a public IP on it and can't be nat'd. I have carved a /30 out of my /26 and have nat exempted it inbound from the outside and outbound f...
I have just started the process with migrating from PIX to ASA-platform. I have used to pixtoasa.exe-tool several times to convert my existing PIX-config to ASA 5520-config, this has been working ok. But after the last time I reset the ASA to factory...
I have a specific need on our ASA 5510 and could use some guidance.Currently our outside interface accepts SMTP from any source, via an access rule. NAT then forwards the inbound SMTP to an internal email gateway.I now have a situation where I have t...
Hi Everyone,I am about to build a new firewall'd infrastructure in which a significant amount of traffic will be running through it. I need to lock this firewall down as quickly as possible. Since there are no rules in place I will enable a “permit...
Hi There,I have a csamc 6.0 using an external ms sql 2005 server. We have been using the text filtering function for awhile now, but suddenly it is just getting the csamc to its knees when trying to search for ex. a specific executable file in the lo...
What cause this signature to trigger?I am not using any SQL services with host 172.19.107.55, scanned host for worm and never accessed this IP 203.161.77.136 from host.any suggestion?Event ID=1214348868918579818Severity Level=3Device Name=IDSM2CORE1R...
Hi,We are using AIP SSM in the promiscuous mode,And every thing seems to be fine.The only issue i am facing right now is that i cannot see the events which traffic comes from the outside to inside zone.Interesting traffic for IPS is "IP any any" and ...
I'm setting up a pair of ASA firewalls that will exclusively be used as VPN endpoints for about 75 tunnels. All traffic passing through it will be VPN traffic, to which none of it needs to be NAT'd. I'm running version 8.x on the ASAs. Nat-control is...
Hi,I am having an issue with auto update on the IPS module installed the ASA. Auto Update Statistics lastDirectoryReadAttempt = 06:00:34 UTC Wed Feb 23 2009 = Read directory: https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl = Error: Aut...
Has anyone tried this? We want to replace 5510s that are in active\passive failover mode with 5550s. We thought we could do this without an outage by removing the secondary 5510 and putting the new 5550 in its place.
Ok so I've got an ASA 5510 with 8.0(4) installed. The situation I've got is I need to alter the destination of smtp traffic based on the source of the traffic. For example, any smtp traffic coming from 1.1.1.1 needs to be forwarded to 192.168.10.30, ...
Good afternoon guys,I'd like to do a vlan with 2 interfaces and just one IP, can I do it?
ASA 5540's configured for active/passive failover. Primary loses connectivity, failover occurs, Secondary is now active.To the untrained eye, how can you tell which device is the Primary?i.e.If the outage was from something other than a hardware or p...
I have a strange problem, Is there any way to make an ASA 5505 (IOS 7.2.3 12) preserve the DSCP tagging when packets pass through and get NATTEd..Basically I have traffic that my voice cube is tagging as DSCP 46, but when it comes out of the ASA it's...
Hi,Can we configure S-2-S, RA and SSL VPN in one CISCO ASA, my concern is SSL VPN is used for 3-rd party users, where we need to restrict. and S-2-S for our customers again restriction. How can I achieve this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
| User | Count |
|---|---|
| 5 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
