0
votes
0answers
30 views

Preserving VPN Flow on ASA + netsh

I have a tcp connection established over a site-site VPN and when the VPN drops it causes errors on the client when sending after the tunnel is re-established. When having this problem before, ...
0
votes
0answers
67 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
0
votes
1answer
23 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
0
votes
2answers
43 views

Open HTTP Protocol Cisco ASA

I would like to know if it's possible to open HTTP protocol (whatever the port) for one of my subnet to the outside on Cisco ASA 5510 v9.1(4) (ASDM v7.1(5)? I guess I will have to play with service ...
1
vote
1answer
53 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
1
vote
1answer
140 views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
1
vote
2answers
72 views

Cisco router or ASA [closed]

Can you tell me what is the difference between having both a Cisco router and ASA appliance in a network and having only the ASA? I remember that my ISP had set a router in front of our network and ...
1
vote
1answer
53 views

How many IP addresses can I expect to block on a Cisco 5500-X Series firewall?

Considering a Cisco ASA (5500-X) firewall for our internet edge in front of our web cluster. At the moment, we use a Linux box with iptables. A log analysis system detects brute-force attacks on ...
0
votes
1answer
29 views

Cisco ASA Static NAT Rule Explanation

Here is a chunk of my configuration on my ASA: name <my_external_ip> www.testwebsite.com object-group service http_https tcp port-object eq www port-object eq https access-list ...
0
votes
0answers
65 views

ASDM - ASA Issue

This is actually a two part question, if anyone has had experience with the issue and could help me out it would be greatly appreciated. Backstory: Using GNS3 with ASA 8.4(2) and ASDM 7.1(5). I've ...
0
votes
1answer
745 views

Cisco ASA 5505 - NAT or Port Forward for SIP / VoIP ver 8.4

I just had an NEC PBX installed that lets me use SIP trunks for VoIP services, My gateway is a Cisco ASA 5505 running 8.4 and I only have one public/static IP Addresses. So far, my trunks are ...
0
votes
0answers
24 views

Find a VPN Name on a Cisco ASA box given a remote IP address

I have a Cisco ASA box with multiple site-to-site VPNs defined. Is there a way to automate finding the VPN name based on a given remote IP address?
-1
votes
1answer
48 views

IPsec VPN Server behind Cisco ASA (Transparent mode)

I've a Cisco ASA 5510 with transparent mode, and I'm going to setup a IPsec VPN(Openswan) in a internal linux server(with Public IP). This server has 2 NIC, 1 public IP, and 1 internal IP. I've ...
0
votes
0answers
64 views

Cisco ASA Allow ASDM from outside

My Cisco ASA 5515 is running in transparent mode. And I want to open ASDM for outside. I've already run these command. http server enable http 0.0.0.0 0.0.0.0 outside http 0.0.0.0 0.0.0.0 inside asdm ...
-1
votes
1answer
43 views

Cisco ASA 5505: Created a faulty NAT rule. Can't reach the ASA

I was trying to create a NAT rule to reach my internal web server from inside the LAN. Something must have gone wrong. Now when i try to reach the ASA through https://192.168.1.1 the response is from ...
1
vote
1answer
50 views

Cisco ASA 5505: Reach outside DNS address from inside

We use a Cisco ASA 5505 at our company. We have a dns A record (home.company.com) pointing to the external IP. In the ASA 5505 the http-port (80) is forwarded to an inside web server. No problem ...
2
votes
1answer
197 views

Dual ISP Inbound NAT — Asymmetric routing

routing question here. In a dual ISP scenario is there way to use both external IPs and nat them to a web server in a higher security level? The issue I am running into is on the return path for ...
0
votes
2answers
120 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
1answer
127 views

Enable Cisco ASA as an SSH Tunneling

I am trying to utilize my Cisco ASA as a SSH Tunnel. I've configured this before when using a Linux server as the SSH target, however I cannot seem to get it to work with the ASA. I have configured ...
1
vote
1answer
68 views

Is this a common/bug on this PPPoE setting for Cisco ASA 5505?

We have to change the way the firewall setup due to we've changed the internet provider. The way we setup we have ADSL modem and we have to do a full bridge mode and the firewall configuration has to ...
0
votes
1answer
35 views

Seeing odd (to me) packets in a network capture

This morning I connected a system to our switch connected to our ISP handoff in order to do some wiresharking. I had yet to set up any port mirrors, and confirmed that there were none in place. ...
0
votes
0answers
126 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
1answer
51 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
1answer
151 views

Cisco ASA 5510 SNMP config-change

I´m trying to set snmp trap when cisco asa 5510 is changed. I´m using this line: snmp-server host DMZ ZZ.YY.XX.5 community * snmp-server enable traps entity config-change fru-insert fru-remove But ...
1
vote
0answers
129 views

Cisco SPA504G phone CDP/LLDP issue

Good morning everyone, Just recently signed up for the site because I'm looking for some help with an issue that's been plaguing me for about a week now. I hope I'm posting in the right place. If ...
2
votes
0answers
241 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
1
vote
0answers
121 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
1
vote
0answers
47 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
1
vote
1answer
290 views

LACP : Cisco ASA 5515 & Switch ProCurve 2920

I've two ASAs 5515 connected in failover Active/Stand by (on Gi0/5) My two ASAs are connected to two Switch ProCurve 2920 to have HA if something happens. So I plug something like that (don't pay ...
0
votes
0answers
166 views

Cisco ASA 5512 and access on interfaces with same security levels

I have a new cisco asa 5512 Cisco Adaptive Security Appliance Software Version 8.6(1)2 Device Manager Version 6.6(1) with the Security Plus Licence. I have a number of VLAN's containing servers ...
1
vote
1answer
121 views

Cisco ASA: Terrible network speed once or twice a day, fine otherwise

I've been trying to get to the bottom of this for a while now and, well, it seems like I can't. We have two servers behind an ASA5505 (software version 8.3) at a datacenter. They run a wide variety of ...
0
votes
0answers
46 views

Cisco Firewalling traffic on Site-to-Site VPN

So with Cisco's, ASA 5505 at one end, 5510 at the other, a Site-to-Site VPN is configured. SiteA and SiteB. Now it get's complicated as their are VLANs both sides, several in fact, but this is working ...
0
votes
0answers
68 views

Cisco ASA-5505 port forwarding UDP 10000

When I try to portforward UDP 10000 using the following command via ASDM: static (inside,outside) udp interface 10000 192.168.0.141 10000 netmask 255.255.255.255 tcp 0 0 udp 0 I get the following ...
2
votes
1answer
160 views

VPN Failover Cisco ASA 5505

So basically we have a Cisco ASA 5505 (we have inherited this from a customer, none of us have any experience with Cisco's). Now essentially we have to WAN lines which we have setup in Failover, via ...
0
votes
1answer
73 views

Cisco ASA: Why do I sometimes need a username/password when entering enable mode

I'm automating some interaction with Cisco ASA devices. I need to do the following: login over ssh send 'enable', provide enable password send 'configure terminal' send some other commands, never ...
0
votes
1answer
121 views

Route being ignored on core Cisco 6500 switch?

This is less likely a bug, and more likely a lack of my own understanding on routing. I am having an asymmetric routing issue where return traffic is going out the wrong firewall. I have an explicit ...
0
votes
1answer
133 views

How do you configure a Lan to Lan VPN on an ASA without using your outside interface IP address?

I have two /28 subnets A & B. My PIX and ASA's outside interface addresses are both in subnet A. I am in the middle of a migration from the PIX to the ASA and need to use the PIX outside ...
0
votes
2answers
443 views

Cisco ASA-5505 Port Forwarding

I have a Cisco ASA-5505 firewall, which is currently configured to share our internet connection and do NAT for my LAN, as well as forward port 443 to an internal machine. I need to forward port 2222 ...
0
votes
0answers
38 views

How can I stop a GGP-3 packet attack on a Cisco ASA firewall?

I have recently been having trouble with my server being attacked and so I was advised to get a Cisco firewall installed, which I did, this seemed to help for a while but now I have noticed that on ...
0
votes
1answer
1k views

How can I debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM?

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious ...
0
votes
0answers
260 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
105 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
0
votes
2answers
297 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
6
votes
1answer
217 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
1
vote
3answers
154 views

Cisco ASA Route command

I'm trying to route connections that are going outbound from my private network to an external IP via another host that is on my internal network. Should the following work? For example: External ...
3
votes
2answers
3k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
1
vote
1answer
262 views

Broadcom NetXtreme II GigE Teaming Does Not Use Unique MAC, Causing Collisions

I currently have a new Dell server on my local (inside) network that I have setup to use three of the four nics to create a team. Examples below. NIC_1 - mac: 000000000001 - ip: n/a NIC_2 - mac: ...
0
votes
0answers
49 views

Multiple Ports Forwards, Most Working, but Not All?

So I have this ASA5505 setup and pretty much everything works, except a couple key port forwards. Can anybody spot ANY reason why SOME port forwarding would not work? Specifically I know the 50000 ...
0
votes
3answers
155 views

Cisco ASA active SwitchPort

Does anyone know how to see which switch ports are cabled from CLI or ASDM? I am configuring a 5505 and the inside has 6 interfaces associated, only one of which is actually actively linked. I can't ...
0
votes
1answer
297 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...