Network Security

Resolved! why ASA in transparent mode require same ip subnet to that of connected network

In ASA transparent mode, Why it is necessary to keep management ip in the same subnet to that of connected network?what if I keep management ip in diffrent subnet than that of connected network?If I do so does the traffic move through the asa and wh...

FWSM - Low throughput and connection Speed

Hi,I have two FWSM's modules running in two 6500 as an active/passive pair. THe problem is that we're experiencing low throughput in some connections (about only 10Mbps).I've been doing some research and I found that ASA does TCP coalescing and in ca...

Resolved! Cisco ASA in Transparent Mode Management

Hello,I know that the Cisco ASA Transparent Mode implementation requires a management IP Address in order to pass traffic:"For IPv4, a management IP address is required for both management traffic and for traffic to passthrough the adaptive security ...

high cpu usage on pix 515e

i am pix-515e is running 100% right now. can you someone please help me? i already disabled dns, netbios h.323 ras on the global-policy. however, the cpu still at 100%fw1# show proc cpu-usage sorted non-zeroPC Thread 5Sec 1Min ...

VPN failover config on VPN client

Hi Everyone,Is it good practice to config VPN failover config on client rather then on VPN gateway itself?Are there any advantages or disadvantes of this?RegardsMAhesh

Create a Failover for Cradlepoint with no static ip on cisco asa

a company has at&t as the primary. and they want the cradlepoint as the failover. but the cradlepoint has no static ip. the company realizes they will only beable to surf the web if the failover cradlepoint is active. so once i have the c...

One Global Address Shared by Both Regular and Policy Dynamic NAT in ASA (pre-8.3)?

In a pre-8.3 ASA, is it possible for both regular dynamic NAT and policy dynamic NAT to share a single global address?I see two configuration possibilities, but I am not sure if either of them would work.1. Two nat statements share an ID and therefor...

Resolved! sh crypto iskamp sa on VPN ASA

Hi Everyone,I am studying about VPN these days.I did sh crypto isakmp sa Active SA: 8 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)Total IKE SA: 81 IKE Peer: 198.x Type : user Role : responder R...

Resolved! Cisco ASA 5520 is not stateful on GNS3

Hi folks,I´m learning for my CCNA security and I take some labs in GNS3. At the time I´m learning to configure a ASA firewall and this is where I´m hanging now.I have configured a Cisco ASA wich version are 8.4(2) and ASDM-version 6.4(9). I configure...

Resolved! Disable failover before changing config

hiI'm making some major changes to the config on an active/standby asa this evening and am planning the roll back in case things go bad.I'm planning to wr mem the config and then 'no failover' on the Active asaTHen make the changes.If all goes well, ...

Resolved! ASA5505 Port Forward/Translation

I'm trying to configure static PAT for a Linux SSH server on my network. The tricky part is that I'm trying to map port 21 from the outside to port 22 on the inside (because port 22 is blocked on my work network).I've tried the following but it does...

Cannot run ASDM 7.1.4 on ASA 5550 ver. 8.2.5

Hi,I uploaded the above ASDM to my ASA's and trying to operate the ASDM without success. In the ASA I configured the below:http server enable 1512http 192.168.1.0 255.255.255.0 managementhttp 10.20.2.192 255.255.255.255 insidehttp 10.20.168.22 255...

ASA 5512-X no route to host to default gateway and any other hosts

Hi,Can someone help me with the following?I am working on an ASA 5512-x at the moment.I just returned to the factory default I started to set the IP of inside and outside interface and after this I set the default gateway, but ASA don't use it.I cann...

Problem adding URL to whitelist using Regex.

Hello,We have a Cisco 5525 ASA, and we have a Whitelist where only the agents are allowed to go to specific websites.I am using the following commands to add a new URL to a list which was preconfigured by another IT member:Example:(config)# regex all...

Puedes un hace debugging de las sesiones TCP en un FWSM?

Hola,Existe algun debug para ver las conexiones tcp que se van abriendo y cerrando en un FWSM? Se que las versiones actuales de ASA para esto puedes hacer un "debug tcp", pero existe algun comando en el FWSM que haga algo similar a esto?Saludos.

Network Security

Forum Posts

Resolved! why ASA in transparent mode require same ip subnet to that of connected network

FWSM - Low throughput and connection Speed

Resolved! Cisco ASA in Transparent Mode Management

high cpu usage on pix 515e

VPN failover config on VPN client

Create a Failover for Cradlepoint with no static ip on cisco asa

One Global Address Shared by Both Regular and Policy Dynamic NAT in ASA (pre-8.3)?

Resolved! sh crypto iskamp sa on VPN ASA

Resolved! Cisco ASA 5520 is not stateful on GNS3

Resolved! Disable failover before changing config

Resolved! ASA5505 Port Forward/Translation

Cannot run ASDM 7.1.4 on ASA 5550 ver. 8.2.5

ASA 5512-X no route to host to default gateway and any other hosts

Problem adding URL to whitelist using Regex.

Puedes un hace debugging de las sesiones TCP en un FWSM?

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

FTD DNS resolution FMC managed multi-instance

bluecoat packetshaper 3500 support tacacs+ will support on Cisco ISE

Firepower-WHat is AD group limit capacity which can be included via AD

firepower-1140-failed | ASA image upgrade | Prep step

Cisco Cyber Vision

ASA->FTD migration tool

Not able to connect ASA from FXOS mode in Cisco FPR3105

FTD Ugrade

recent vulnerability check CVE-2024-20359/CVE-2024-20353

FTD 2110