The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (1)

1
vote
1answer
12 views

Asterisk behind Cisco ASA 5505

I'm in the process of upgrading from an old WRT54GL running Tomato to a Cisco ASA 5505, versioning as follows: Cisco Adaptive Security Appliance Software Version 9.1(5)21 Device Manager Version ...
0
votes
0answers
18 views

Cisco ASA 5505 access external IP address from internal

Got a bit of a head scratcher. ASA Version: 8.3(1) ASDM Version: 6.3(1) So I have an ASA 5505 with 3 interfaces (Inside, outside and Hosting). The inside interface has the IP range of 10.0.0.X and ...
1
vote
0answers
13 views

Cisco ASA l2l tunnel established, can receive pings but cannot reply

I'm a bit new to managing a Cisco ASA appliance and I'm doing my best to learn, however I got a problem here. Long story short, we are trying to connect a hospital's ADT HL7 feed to our remote ...
0
votes
1answer
29 views

Cisco ASDM issue “cannot open device”

I've just gotten my ASA 5510 set up to run AnyConnect VPN (w/ client). Unfortunately, it appears that I broke whatever allows the ASDM to connect in somewhere during that process. I get a "cannot open ...
0
votes
0answers
6 views

ASA 9.1 NAT Rule issues

I added this NAT rule on my 5510 ASA object network SHF-NY-DC01 host 192.168.1.50 nat (Inside,Outside) static interface service tcp ldap 6699 access-list inbound extended permit tcp any object ...
0
votes
0answers
21 views

Cisco ASA SYN timeout due to SSL errors?

One of our clients is attempting to connect to our AWS hosted websites through their websense proxy and ASA firewall (some use Palo Alto firewall instead). While we and others can access the sites ...
0
votes
0answers
33 views

Cisco ASA 5505 Split Tunnel Multiple Networks Not Working

I have an ASA 5505 and cannot get Internet access for VPN users. Config Layout is specified below. ASA (10.15.0.1)-->(10.15.0.2) Core Switch (10.5.1.0) Below is my config. ...
0
votes
0answers
29 views

VMware ESXI Behind ASA5506-Xs using Public IP is Not Communicating

Here is the lay of the land. Everything works but I cannot get data flow from ESXI Server or it's VM's I want them using public addresses from behind the router. The Vmware ESXI Hypervisor on a Bare ...
1
vote
1answer
19 views

Multiple public IPs routed via Cisco ASA to Proxmox VMs

I have a network with IP 199.221.2.136 (/29). I would like the Cisco ASA5505 [1] to work on .137 as router and use two public IPs (.138 and .139) on two VMs on a Proxmox server. Not sure how to route ...
0
votes
0answers
30 views

Unable to ping or RDP to servers via remote access VPN after DNS server change Cisco ASA

We have a setup here were users can remote into our network via VPN and then remote to their desktops. This was all working fine. The other day, we moved DNS from one server to another. I changed ...
1
vote
0answers
34 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > ...
1
vote
1answer
69 views

Multiple DHCP servers in multiple subnets, one DNS server

I have existing network with two subnets - one is the main company subnet (192.168.1.0/24), the other is completely separate VLAN for Guest Wireless and BYOD devices (192.168.2.0/24). There's Windows ...
0
votes
0answers
31 views

IPSec tunnel through ASA from specific IPs

I'm having some difficulty getting an IPSec tunnel to work through an ASA5510 that is already configured with a number of different tunnels that it terminates, as well as individual VPN clients. ...
0
votes
1answer
94 views

Cisco ASA 5550 rebooted itself, logs cleared

we had Cisco ASA5550 in Active/standby mode which worked without any issue for over 1 year. Recently, we started having issue where the VPN tunnels would drop to sites and have internet outages. We ...
0
votes
1answer
60 views

Wireless authentication with DD-WRT, Cisco and Microsoft

I'm looking for a way to authenticate my wireless users beyond them just knowing the wireless password. Ideally they would join the access point then get dumped to the login portal that they'd have to ...
0
votes
1answer
67 views

What is the proper way to create a vlan?

My goal is to create a separate VLAN, that will be isolated from the rest of the office, I just want them to have internet. Normal pc stations x1 HP Procurve switch V1910 x1 cisco asa 5512-x What ...
0
votes
1answer
56 views

ASA5505 don't allow FTP traffic

I'm new to CISCO and ACLs and NATs but I''m willing to learn. I am having problems allowing FTP access through my ASA5505 ASA 9.2 (2) ASDM 7.3(3) This is my problem, I have a domain which has my ASA ...
3
votes
0answers
181 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
0
votes
0answers
22 views

Routing and VPN Setup

The network setup is as follows: Router: eth0 1.1.1.1 (outside) eth1 192.168.54.4 (inside) eth1 10.54.4.4 (inside) Cisco ASA5505 192.168.54.1 (inside) 10.54.4.1 ...
4
votes
0answers
69 views

Cisco ASA failback to preferred IPsec peer

I just configured my Cisco ASA 5505 to failover to a backup internet line when the main outside interface is down. This all works fine. Also, I have a site-to-site IPSEC VPN tunnel from this ...
0
votes
1answer
408 views

Cisco ASA site-to-site VPN up but no traffic

I currently have site to site VPN tunnel up between Cisco ASA 5550 & Cisco ASA5506-X. I can see the vpn tunnel is up on both end but no traffic is passing through. Cisco ASA 5550 is receiving ...
1
vote
0answers
36 views

Cisco ASA 5505 no NAT

I have a cisco asa 5505. The outside and inside IPs are private IPs so I do not want to NAT the inside IPs as they go out the Outside interface (there is a router upstream of the ASA 5505. Would I do ...
1
vote
0answers
37 views

Allow Ports 80, 443 and 81 through ASA 5510

We are switching our VoIP provisioning method from TFTP to HTTP provisioning and have been asked by the VoIP provider to allow inbound access on ports 80, 81 and 443 from their two network networks on ...
1
vote
1answer
27 views

CISCO ASA: Add specific command to a privilege level

i am facing the following issue, created a new account with a "read-only" access on a CISCO ASA 5510. This account will be used in a script that will back up the running-config of the ASA. the ...
0
votes
0answers
73 views

asa5512x: ipsec site-to-site vpn with tcp instead of udp? is it possible?

the cisco documentation for ASA 9.1 (I have 9.1.2) seems to imply that ipsec vpn with tcp/ip is only for remote clients, not site to site vpn. But I repeatedly see people mention vpn over tcp to ...
1
vote
0answers
23 views

Tethered VPN on Macbook fails to connect, but standard VPN over WiFi works [closed]

I have a MacBook using the Cisco client and it works fine except when I use the special Mac/iPad ability to tether over the iPad data connection. For those that are unfamiliar with this, the Mac and ...
0
votes
0answers
47 views

Remote Desktop Gateway temporarily unavailable outside LAN

I have setup Microsofts RD Gateway on a server in one of our subnets. We have multiple subnets separated by a Cisco ASA firewall. One for servers, one for desktops etc. If I run mstsc from the server ...
0
votes
0answers
16 views

how can a low security group communicate with a high security group in ASA 5525

My DMZ Interface has security level 50 and my interface "old_network" has security level 40. My DMZ has a range 172.16.20.224/27 and my old_network has 192.168.1.0/24. The DMZ can communicate with ...
0
votes
1answer
36 views

cisco asa 5512-x policing

I have a single 100mb leased line that will be shared by three unrelated companies. We are looking to buy a cisco ASA 5512-X and I need to use policing to ensure that each company receives 1/3 of ...
1
vote
1answer
53 views

Cisco ASA separating networks

We are using a Cisco ASA 5505 running ver 9.0 to separate our corporate (inside) network from a dev lab (outside) network. We would like to use NAT or PAT to forward the inside interface IP to a set ...
-1
votes
3answers
421 views

Why can i not ping my host behind the firewall. Cisco asa 5505 [closed]

Can anyone please help me to figure out what in my configuration of the Cisco asa 5505 is wrong or missing. I have multiple host behind my firewall these hosts run different websites on port 80. I am ...
3
votes
1answer
312 views

Nmap external scan shows port open, ASA says port is not open, but do get an socket

Folks, have a weird one, need your expert help. For one of our heavily used external facing server which came up in an audit, nmap -Pn scan shows the following: Starting Nmap 5.51 ... Host ...
0
votes
0answers
391 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
0answers
86 views

Cisco ASA 5505 VPN users access to local LAN denied

I have this running config: : Saved : ASA Version 8.2(5) ! hostname TESTATES domain-name TEST.com names name 192.168.1.0 AsusWireless ! interface Ethernet0/0 switchport access vlan 2 ! interface ...
2
votes
0answers
356 views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
0
votes
0answers
64 views

Cisco Cryptochecksum generation

I ran 2 commands - a show start and a show run. I noticed that the cryptochecksums were different. My main question is understanding the cryptochecksum and how it is generated. Is it different ...
0
votes
0answers
43 views

Determining the side-effects of enabling unicast reverse-path forwarding on Cisco ASA 5505

I am trying to find out what (if any) negative side-effects there would be to enabling Unicast Reverse Path Forwarding (uRPF) on a Cisco ASA 5505 - I need to do this on a router which I do not have ...
0
votes
2answers
222 views

HttpServletRequest.getRemoteAddr() always returns 127.0.0.1

We're attempting to identify where specific requests are coming from inside our Java application. We have changed the log files to include the IP address and we're using ...
-1
votes
1answer
107 views

Find source(s) of dropped packages in Cisco ASA GUI

we are using pair of ASA 5520 Firewalls with ASDM 6.4. Can someone enlighten me, how to find out which is(are) the source or target ip(s) when we got a hugh bunch of dropped packages come in (by ASDM ...
0
votes
1answer
59 views

Need help understanding a bandwidth restriction on a Cisco ASA

We have a guest wireless network here and it's bandwidth is limited too 1 Meg per second. I did not configure this and am trying to pick it up. I've found these lines in the cisco config but i'm not ...
1
vote
5answers
153 views

Multiple Computers Running IIS with a Singular Public IP how to handle incoming communications?

At our company, we have three separate servers that house IIS currently. Each of these three servers have the same public IP address and essentially reside on the same network under different subnets. ...
0
votes
0answers
238 views

Cisco ASA firewall blocking requests to internally hosted DNS server

I have a DNS server behind a Cisco ASA firewall. The Cisco firewall is performing NAT. When inside the network, I can NSLOOKUP directly to the server. When the client is external, requests time out. ...
0
votes
2answers
171 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
1
vote
1answer
133 views

WatchGuard Authentication equivalent with Cisco ASA X series

I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
2
votes
3answers
193 views

Cisco ASA NAT - internal host see its public ip

I have a server hosted by a provider which uses Cisco ASA to do nat. The problem I have is that the internal server that is nat-ed with a public ip will see its public ip as source ip. This basically ...
0
votes
0answers
71 views

Cisco vpn access to another router

I am using a Cisco ASA 5505 to VPN into my network (which is working great), and I want to connect to a different network that is on a Asus RT-N66v. For example: network 10.1.1.1 is my VPN and ...
0
votes
1answer
58 views

Cisco asa 5505 w/ seperate subnets and seperate isps

I am trying to join two networks together thru the asa. I have a 192.168.0.1 network that is the main domain and has its own isp and is administered by windows server 2008 for DNS and DHCP i also ...
1
vote
1answer
392 views

Cisco ASA - difference between inside_access_in and inside_access_out?

So a minor problem we have is any internal servers have no (non-icmp) access to the outside is being blocked. Our current config is: inside_access_in any ---> any ---> icmp inside_access_out ...
0
votes
0answers
230 views

Route Email to external IP Cisco ASA 5515

I have a cisco ASA 5515X with two WAN connections and one LAN connection. As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1. ...
-2
votes
1answer
141 views

Can I use ASA5505 to spoof the reply to a heartbeat request?

I have a CISCO ASA 5505 in a home office. It has two subnet, public and private. There is a wifi belkin router on the private net, which provides wifi for some users. That belkin router sends out ...