I have Cisco ASA & below is the sequence of existing NAT. nat(inside,outside) source 1.1.1.1 2.2.2.1nat(inside,outside) source 1.1.1.2 2.2.2.2nat(inside,outside) source 1.1.1.3 2.2.2.3nat(inside,outside) source 1.1.1.4 2.2.2.4nat(inside,outside) sour...
I was just able to get vulnerability scanning for a vFMC suite with 2110's started and it's calling out the SSL Certificate cannot be trusted. This and a few others relating to the same thing. The FMC has a valid certificate, but the scans are pi...
Hi Experts, In order to be able to establish sofphone calls from one VPN user working from Home to another VPN user working from HOme too, I need to enable the traffic between VPN users. I have ASA 5515. My understanding is that I need to add a NATna...
We have a website that is accessible on the Internet and only allowed to be accessed via our public IP. We need vpn users to be able to access via anyconnect when they are not in the office. To accomplish this, do I just add the IP of the website int...
Hi all , The 200E does not appear to have the Hardware switch option like the 100E's on which I was able to just allocate an internal ip (hardware switch) and I can get access to the switch without any more configurations.I need an internal network ...
Need your help on this issue on the ASA5525. QMS-BRC-DAAS-ASA5525# show processes cpu-usage | include DATAPATH - - 85.2% 76.0% 72.9% DATAPATH-0-1903 QMS-BRC-DAAS-ASA5525# show processes cpu-usage | include DATAPATH - ...
snmp-server group NMS-Bulletproof v3 privsnmp-server user BulletproofSNMP NMS-Bulletproof v3 encrypted auth sha ad:1c:9e:1a:f4:7a:9b:ce:cd:91:23:9f:cf:2e:e6:e9:80:57:99:5f priv aes 256 5f:e5:44:97:30:ea:25:44:ba:54:12:0d:69:be:96:c1:20:34:99:42:21:a3...
CVE-2018-0101 - ASA 55169.9.2.1 is not released yet as per cisco so I upgraded to 9.12.3 but getting CVE FAIL test from PCI Scan. Any sugggestion
We have a system in our DMZ which regularly hangs and the supplier have told us it's because we're NAT'ing the source address into the DMZ and the server can't handle so many connections coming from a single source address. Their recommendation is to...
We upgraded from ASAs a while back and when transferring policies and objects over to the new system, many, if not most of the items took a generic name, such as "DM_INLINE_xyz" or "Outside_connection_#xxx", which makes it diffult to know what the po...
Hello Who could tell me how to be sure whether this IPS event (MALWARE-CNC User-Agent known malicious user-agent string AutoIt ) is false positive. I get this notification very often. Device : firepowerTimestamp : 2020-03-30 10:18:53Protocol : tcpAle...
Current error I'm getting, not sure why.ciscoasa# copy tftp flashAddress or name of remote host [10.0.0.220]? 192.168.101.150Source filename [asa917-32-k8.bin]?Destination filename [asa917-32-k8.bin]?Accessing tftp://192.168.101.150/asa917-32-k8.bin....
I have numerous routers deployed in my network. These are a variety of 4331, 4321, and 891. I have set them up with a privilege level 5 login so that network technicians can view the running configuration, view interfaces, and do basic troubleshoo...
Hi All,One quick question. Let's say we boot 2 images on the boot system like the following vpnb# sh run bootboot system disk0:/asa943-smp-k8.binboot system disk0:/asa941-smp-k8.binvpnb# If the first image fails/or if it's corrupted while booting th...
Hello, I am wondering how to change which image is loaded by default on an ASA5510. I have two image files stored in the flash memory on disk0:/ but need to change which one is loaded on boot. I used the command "boot system disk0:/asa722-12-k8.bi...
