Hi,In my ASA I am getting some error when I want to configure static NAT and NAT exempt configuration. I think Some miss configuration has been done.The error msg given below..Firewall-ASA-02(config)# static (inside,outside) x.x.x.12 10.138.77.54 net...
Hi All, We now have people accesing our network over the VPN. I need to set up an ACL to only allow the VPN Users to certain servers. I am new to pix but do have gui access so am hoping that may be easier.If someone could point me in the right direct...
Hi all,Today, my ASA5510 outside interface have the ISP IP (from DHCP aaa.bbb.50.144).I do use NAT to access a web server in a DMZ ("static (dmz,outside) interface 172.16.1.80 netmask 255.255.255.255") from the outside interface.Tomorrow, we will hav...
Greetings friends.I've got an 5510 setup for internet (static). The appliance builds the connection, tears it down, no errors.Problem I'm having is, no one can get access. I can ping and traceroute fine from the ASA to the 'net. I have a rule allowin...
Hi all,I am a fresh cisco user, i am trying to configure a cisco asa 5510 with the ASDM GUI. Actually, Eth0 is set as Outside interface (DHCP, fixed ISP Public IP) and Eth1 as DMZ interface with a Web server (ip 172.16.1.80) behind.And i don't find h...
Hi,I am working with the IDSM-2, We have Cisco 6509 with CSM & FWSM, We are planning IDSM-2 in Inline mode and now i want to monitor the traffic which is coming through Outside Interface of the FW context ( Which is nothing but a VLAN A, VLAN B, Vlan...
Hey Folks,I've set up my outside vlan as so:interface Vlan2 nameif outside security-level 0 ip address dhcp setrouteI need to release the IP address that that interface got dynamicly from the ISP. Kinda like doing a "ipconfig /release" on a windows b...
How can we use NAC on thin clients.
I am configuring my first ASA and have not been able to figure out to to limit access to a few subnets and sites on the internet.I would like to only allow access to two internal nets10.10.23.128 255.255.255.12810.10.26.0 255.255.255.128a single woul...
Hello -I have a 2600 router that separates two networks and I need to setup an ACL to allow traffic from 192.168.1.0/24 to two IP Addresses, 10.13.3.10 and 10.3.10.2. The rest of the network should be accessible from the 192.168.1.x net.
Could anyone please help. I recently installed a PIX 5520 with AIP-SSM-10. I can manage the sensor just fine and am using "configuring Cisco IPS using CLI 6.0" as a reference. I recently downloaded new signatures as sig1 on my sensor. when I enable t...
My customer recently tried to upgrade their ASA5520 to ASA 8.03(12). When they did that, all FTP through the firewall ceased to function.Is there a fix or a workaround for this?
I am having some trouble getting this tested in the lab. Essentially I have two PIX 506e setup, one pretending to be the hub, and the other a spoke (outside interfaces on the same network) with a working tunnel between them. I could ping across them ...
I currently have a Cisco IPS 4240 employed inline in my Customers Network. It is inside of the border Router, and in front of the Outside Firewall which protects the DMZ.the IPS is already configured to block certain types of packets inline. I was re...
I am looking to do failover with two Pix 515E devices and looking at the advantages and disadvantages for Active Active and Active Standby. I see Active Active lists as not supporting VPN because of the multiple contexts. Is this just referring to si...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM | ||
| 06-24-2026 08:00 AM |
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
