Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi guys,
after an ISE upgrade the AD connection is lost and i have to join AD manually again. The upgrade procedure takes a very long time as you know and will be not sitting in front of the CLI during the complete upgrade procedure.
The main pro...
Hello, i am struggling with solving following scenario: I have a mailserver in DMZ network with private adress e.g. 192.168.0.1 and public adress e.g 1.1.1.1.I want to accomplish that the mail server sends mails out of port 25, but receives mails on ...
Hello, i plan to replace 2 old ASA 5510 with ASA 5512-X in active/standby configuration.I think i need to purchase 2 x ASA5512-SEC-PL license to achieve active/standby configuration?Further there is the need for 100 Anyconnect Premium licenses (L-ASA...
Hi guys, i am facing the issue that a high amount of packets drop occour at the dmz interface of my ASA and result in a poor performace.I think its due to overload this interface but i am not sure. I think these are caused by FIFO drops. Maybe you c...
Hi Arne,you are right , the upgrade procedure is a pain as it takes a lot of time without detailed information to finish time. Building new notes and restoring a backup is an option but also a lot of work. If upgrade procedure finishes without proble...
Problem solved: I didnt noticed that there was also an object-nat on the private adress which automatically opens port on global adress on outside interface. After deleting object NAT from 192.168.0.1 to 1.1.1.1 i can add port 50025 to my outside ACL...
Thats correct Outside world communicate with 1.1.1.1:25But Server inside expects 192.168.0.1:50025. NAT operations take place before the packet is dispatched from outside interface to dmz interface. So i have to open port 50025 on outside ACL in my ...
