What are people setting their firewalls logging levels to out there for compliance requirements?
What are people setting their firewalls logging levels to out there for compliance requirements?
Dear community,We have a pair of ASA 5545X firewalls in an Active/Failover HA pair. The configuration of our external "outside" interface is in a port channel with the rest of our internal interfaces. I have to do some work this weekend to change tha...
I think I need a twice nat but i have never done one and its confusing to me. My scenario is this: Client A = 10.81.113.10 Server B = 10.0.1.4 Site A has Client A Site B has Server B Client A cannot hit Server B on its IP address (real IP). ...
Hi I have a situation where Cisco ASA with Sourcefire is inline mode , ASA is acting as a default gateway & can monitor the traffic . Now Customer wants to monitor the traffic for rest of the IP, where ASA is not in the path . reading the https://...
Hello,Here is a simple diagram of our network : 192.168.51.0/24 ---192.168.51.1 inside (Cisco ASA) --- Interface oustide--- Internet|192.168.51.5 ---ISP Router--- ISP network---- 10.100.0.0/16 The default gateway to outside is the ASA's inside interf...
Dear All, We use a third-party tool for vulnerability tests on our internet facing devices and for my Cisco ASA5508, i got this below error. SSL Certificate Cannot Be Trusted 443 / tcp / cisco-ssl-vpn-svr . I am not hosting any gateway service ...
Two Questions: In previous ASA Version ( v8 ) there was a "Dead Connection Detection" ( DCD) - Function to Keep inactive but already existent Connections open. Is DCD behavior also supportet in FTD ? Background: Using a "foreign " Firewall Connec...
Hey folks, this is my first post here so I am hoping someone can assist. I am setting up a site-to-site connection in my lab using ASA firewalls and ISR routers on each end. The goal is to establish an IPSec tunnel between the ASA's and pass GRE tunn...
We have several Site-to-Site VPN-Connections to our ASA 9.6.4. Is it possible to configure the ASA to operate as VPN responder only? Kind regards
So i have been playing around with a basic scenario of a linux ec2 vm on the inside subnet of the ASAv. A vpn to the VPC and a static route to my remote subnet (opposite side of the vpn). I have tried custom route tables, routes on the ec2 vm, and ro...
I am facing difficulty implementing access rule in ASASM. The rule does not catch traffic. If I permit ip any to any it allows the traffic I have attached the packet trace. The first rule below is my more specific rule. Also the items in two packet...
Hello, After migrating the firewall policy from an ASA to Firepower most of the objects in the rules were automatically grouped and named using the "DM_INLINE_NETWORK" or "DM_INLINE_SERVICE" naming convention. This difficult a lot the understanding...
If I want to configure ZBFW to inspect everything, I need to ip access-list extended everythingpermit ip any anyclass-map type inspect match-any everythingmatch access-group name everythingpolicy-map type inspect MYPMAPclass type inspect everything ...
I have been at this for a good long time and have read all the articles about management-access inside, tftp-server inside, or outside. I literally CANNOT download a new ASA image from tftp over a IPSEC vpn tunnel? What is the magic potion here?
I am working on setting up an ASA5520 to use the TRACK and SLA MONITOR function to support failover to a backup DSL link. The route injection is showing metric of 1 for the backup link when primary service is restored, even though static route shows...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
| User | Count |
|---|---|
| 6 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |