I have an ASA-5516-X that I'm migrating an old 5510 to. As an example I have the below, which is trying to take inbound port 54321 and routing that to 'thing:80' inside. object network thing host 192.168.1.27 nat (inside,outside) static interface se...
Forum Posts
Hello Experts, I have seen in ASA firewall for enabling VPN site to site they use below 2 commands. 1. Crypto isakmp enable outside2. Crypto ikev1 enable outside. As for my understanding the 1st command is used before 8.4 versions of ASA. Please corr...
We recently put in a secondary internet connection across the state. I have the primary connection coming into our main office. Both connections come in to ASA's that are set up in a failover pair. Topology Between Connections Primary ISP > 4500x ...
Hello Everyone,It may very well be the time of day I'm writing this and long hours of looking at the screen.. but I'm setting up a lab ASA with an inside and outside interface. Inside interface is connected to a L3 Nexus 3064 using a transit VLAN ( 1...
I am looking for advice on which tools people are using to analyse syslog data from their Firepower modules to get detailed information on user Internet access. I am able to send the data to our syslog server, and have set up the free version of Splu...
Resolved! ASA NAT rules
Hello,I have a question about NAT rules on the ASA: they have no action statement and could anyone please tell me do they actually do anything?I am attaching screenshot.
Can someone help me to understand how a firewall makes a routing decision? I have some traffic which needs to get to a subnet not directly attached to the firewall. there is a static route to that subnet, however the nameif subinterface is not the s...
Trying to find a way to create a site to site tunnel using something more similar to ACL on ASA. For example we have a remote appliance that needs to have a site to site to main network using 10.0.0.0/8 as destination (or would have to list out 100+...
Hello Experts, Is the below NAT statement is correct. There is 2 different object provided in the destination nat (Outside,Extranet) source static CS_App_2 CS_App_2 destination static obj-10.155.185.220 obj-125.16.239.77 Also please provide me the re...
Resolved! ASA VPN tunnel
Hello Experts, Whether we can use the same policy and transform-set for multiple tunnels? eg: I have created one policy and one transform-set in router(IKEv1).I planned to add multiple crypto-map for different customer and separate interesting ACL in...
We are running ver 6.2.3.14(build 41) of Cisco Firepower. Is there a way to get an exported copy of users from System>Users either as a .csv or any format for that matter? I have looked around and I can't seem to find a way to do so. Any answer or al...
Hello All, Has anyone tried this or has a good idea on the effect? I have not been able to find any discussion or documentation about this specific adjustment. As a short-term mitigation to an overtaxed ASA, I'm considering reducing the setting for ...
Hi, First of all, I would like to thank you for taking the time to help me with my issue. i am working on a Cisco ASA5516 and i am having trouble to access the internet from my DMZ and DC's. On the DMZ, i have one Server working as WSUS and AntiVirus...
Resolved! Encryption
Hello experts, I have seen the encryption strings as des, 3des, aes while creating the site to site vpn tunnel. What is the difference bt these 3 methods and which is preferable to use for encryption? Is there any encryption string apart from the men...
Hi All,We've had an on going problem with the user agent for firepower since day 1, at the moment it just keeps saying "error processing event record - No domain information" (see screen shot). The Active directory server has checked in and shows gre...
