Hi, Write erase and reload will erase everything on the ASA not licences. Hope This Helps Abheesh ... View more

Hi, Is your vlan 602 IP address is from the same range of 192.54.119.128/26, your ASA & Switch side configuration is OK. Please verify one more PO5 is connected ASA1` & PO 15 is connected to ASA2. Hope This Helps Abheesh ... View more

Hi Vibha, Thank for sharing the link, so for intervlan routing needed Advantage license...?   https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/data_sheet-c78-738977.html#Licensing ... View more

Hi, Your ASA version is 9.6(2) and the compactable ASDM version is 7.6(2)+ ASA & ASDM Compatibility Please upgrade the ASDM to 7.6(2)+ and try. Check the compactable Java version for  7.6(2)+ Java and Browser Compatibility   Thanks, Abheesh PS: Please don't forget to rate and select as validated answer if this answered your question. ... View more

Hi Orkhan, Thank you for sharing the details. ... View more

Please do a packet trace and share the output. packet-tracer input inside tcp (insideIP) 44444 (DMZServerIP) http   Hope This Helps Abheesh ... View more

Hi Orkhan, Please share the details once you get update from TAC. As i am also in a very similar situation now that one of my customer required the exact thing. They wan to allow only RA-VPN to be accessed from some specific country IP's. Thanks, Abheesh ... View more

Hi, What is the version of current 5505...? ASA configuration will be similar if you are running version 8.3 or later version in 5505, only thing you need to enable the firepower module for IPS inspections & Malware check.   HTH Abheesh ... View more

Which SM module are you using..?? SM-24, SM-36, SM-44 ... View more

Hi, Below doc can help you to understand more about proxy-arp, route-lookup are where to be used. https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/nat_objects.html   HTH Abheesh ... View more

Hi, For identity nat ASA does not act as a Proxy Server of the subnet used in the NAT statement. It should lookup the route and reach the destination. So for identity nat required no-proxy-arp route-lookup HTH Abheesh ... View more

Hi, For upgrading ASA from 8.2 to 9.9, you need to upgrade to 8.4 first.  Upgrade Path 8.2(x) → 8.4(6) →9.9(x) Please go through the release note before upgrade, there are lot of changes from 8.2 to 9.9. For identity nat ASA not required to answer the arp quires.   HTH Abheesh   ... View more