We are looking to match ACLs based on ToS bits using the ASA 5500 series. Can anyone provide feedback or describe a succesful implementation?
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,633) -
Cisco Bugs
(58) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(149) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(47) -
Cisco Secure Firewall Management Center (FMC)
(252) -
Cisco Secure Firewall Threat Defense (FTD)
(303) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(19) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(46) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(265) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(37) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,581) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(324) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(94) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,594) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,792) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(645) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
We have an ASA 5510 with the AIP-SSM-10. It is a replacement for a 4215 that was setup promiscuously to sniff traffic on a switch. We want to replicate this with the ASA/AIP.I know that the AIP can run in a promiscuous mode, but we can't find any doc...
Does an ASA running 7.x copy the TOS (DSCP) from the original IP header to the new IPSec packet IP Header?Thanks!
Does anyone know of any command line tools that can be used to identify traffic type by port and ip addresses with source and destination? I have used ip nbar on routers but dont see it on the Cisco ASA? Is it possible?
Resolved! ASDM not loading
Hi.We have a cluster of two Cisco ASA 5520 in our environment. Suddenly ASDM has stopped working. When it is launching, I get the following error in the Java Console:Code:"DM Application Logging Started at Mon Aug 04 10:44:03 CEST 2008---------------...
From a Linux system, using the appropriate snmp command, I can get the traffic counters on any interface, so therefore I can monitor total traffic through any interface on the ASA 5520 firewall. No problem there.$ snmpwalk -Os -c community -v 1 firew...
Hi,Based on vast experience can the experts recommend a syslog server to get logs from ASA and Routers.Option 1 ===>> FREE Option II ===>> Purchase
Resolved! IPS Blocking Shunning and Deny Inline
I recently moved from promiscuous to inline and want to take advantage of denying packets inline. With promiscuous mode, I added my local networks to the never block list. Does the never block list apply to the deny packets inline options? If not is ...
Hi, We have a requirement where the FWSM has to send logs messages to the exchange server (located on a directly connected DMZ).Will the following configurations be enough. logging on logging from [email protected] logging recipient-address [email protected] ...
hi,I have cisco ASA 5505 at my end n I am planning to get a linksys( entry level ipsec support router). Is it possible to create a site to site ipsec tunnel between both cisco asa n linksys router ? pls. suggest me any entry level linksys router that...
Can anyone tell me if the ASA supports NTVLMv2 authentication? We are currently on the VPN 3000 and they only support LANMAN which has been deprecated from our company.Thanks,Pete
we have 2 firewall connect via dedicated link and ruuning A/S, my uqestion is, what is heartbeat link down, doea that cause the 2 ASA all active? in that case, our switch will send traffic to 2 firewall?
dear techies I have 2 asa 5510 firewall and want upgrade to security plus image to support HA and failover .I know I can get license from ciso partner for the price ,but I dont know the procdure for the upgrade Plz shower your inputs
Hi, I have a FW solution with 2 PIX (Active/stanby), when I force the secondary unit to be active all is OK, but when the primari unit is active, I see 80% cpu (12% in secondary), so, in orther to find the reason, the "sho perfom" command show me the...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM | ||
| 06-24-2026 08:00 AM | ||
| 05-26-2026 07:54 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
