Hi,Why do I have to create a NAT exempt between interfaces when I want traffic to pass from one interface like the inside to save another interface?
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,624) -
Cisco Bugs
(55) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(149) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(45) -
Cisco Secure Firewall Management Center (FMC)
(236) -
Cisco Secure Firewall Threat Defense (FTD)
(286) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(19) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(46) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(14) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(264) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(37) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,580) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(324) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(93) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,594) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,791) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(645) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
hi,I wish to implement failover on a new ASA 5510 ( base license) with an active ASA 5510 (security plus license). Apparently the former does not support failover. hence i wish to upgrade to a higher license that supports failover.How do i go about t...
I have PIX 501 separating my two internal networks.I am located on network A (10.80.48.0)on outside PIX interface. Server which I need to access is on network B (172.31.1.0)inside PIX interface.Here is part of PIX config:ip address outside 10.80.48.5...
Hi all,Regarding to our ISP, our connection is OK (means 10Mb 1:1, burst 100).So upload and download should reach up to 10Mb.But, in fact, download is close to 10 000 kbps, which is perfect.On the other side, upload only reach 2 800 kbps, in real goo...
I am trying to create a semi-secure connection where a user can VPN into the pix 515, get an address 10.10.10.10 from the VPN pool, access devices on the private side, and also be able to access devices on the outside. Do I do this via access-list on...
Hi all, i have one pix 515 that is having a problem, the configuration is very simple, it works fine but intermittently some IPs can't pass through the firewall even though they are allowed through the ACL, i replaced it with one new ASA for testing,...
Resolved! demo lic for csm3.2
i want to try csm3.2..is there any demo license for this? ive gone thru the licencing without pak but i havent seen any for csm..thanks
Hi ThereI get the following log message when I try to connect to my ASA 5520 running 8.0(3) with VPN Client 5.0.03.0560%ASA-7-710005: TCP request discarded from ...I have no problems when I connect via UDP, then everything runs smoothly, have any of ...
Hi, May i know the use of Management Int in ASA FW and if we make a DHCP Server in Management V-lan and make mutiple scope according to configured V-lans on FW using other interfaces then how the FW will allocate the Dynamic IP to the V-lans client m...
what is the way to connect the router to an isp which doesnot have serial interfaces but has fast ethernet ports? is it possible?
hi My topology1)Internet-router(2ISP terminated in Single Router-two different Firewall-(ASA5510 and PIX 515e)-->inside interface connected in IPS4240--->From IPS to L33750 Switch.Is right place to put IPS4240 and tell me IPS in which mode(inline or ...
Hi to all, I just wan't to know if how can I secure my Mail server if my PIX515 has only 2 interfaces (inside & outside) & no DMZ port to configure? I am thinking to use static NAT & ACL but if there is another way to secure it, can you tell me how?T...
Resolved! Gigabit on ASA 5510
Hi,How would one go about setting the 1000Mbps speed to a ASA 5510 with the "security plus" license?This is what I'm getting on any interface:fw(config-if)# speed ?interface mode commands/options: 10 Force 10 Mbps operation 100 Force 100 Mbps operati...
Sorry for duplicate mail.HiHow can I change the Cisco ASA Console baud setting. Is their a way like Cisco Routers. I do know how to do the same with the Cisco Routers.
Hi there, I have two sites connected via MPLS network. In each site, ASA is connected to the MPLS router. Each ASA also connected to an ISP via another router. I would like to configure a VPN tunnel between the two sites that will be only used if MPL...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 06-10-2026 08:08 PM | ||
| 05-26-2026 07:54 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM |
New solutions
