The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (1)

0
votes
0answers
27 views

Site to Site VPN one-way traffic Azure <-> Cisco ASA

We have a site-to-site static routing VPN (classic VPN, not ARM) attempting to connect to a remote Cisco ASA 5555 (a supported VPN device). The on-premise network can successfully initiate the tunnel ...
1
vote
0answers
17 views

CISCO SSL VPN Apps fail to connect using Java 8 update 71 (Java 8u71)

A remote client uses the SSL VPN apps for port forwarding through an ASA 5505 firewall. Basically no traffic was able to traverse the port forwarded IP addresses. Using the web browser in the VPN ...
0
votes
0answers
16 views

Setting up Cisco ASA VPN to use both radius and local users

I've got a Cisco ASA setup with L2TP/IPSec VPN, all is working well except for one minor issue. Ideally, I'd like to be able to log on to the VPN using either that RADIUS server users or the local ...
0
votes
1answer
17 views

Cisco ASA logging buffered spams terminal and console lines

I have several routers, switches and firewalls that send logs to a syslog server without interfering with the console line. I'm testing an ASA 5506 (running IOS 9.5.2) at a remote location that ...
1
vote
1answer
34 views

ASA 5510 Secondary Public IP Range on outside interface

We are in process of upgrading from an ASA5505 to an ASA5510. I have a co-location configured for 3 ranges of public IP addresses on two different subnets. The 5505 is working as expected. Example ...
0
votes
1answer
27 views

ASA 5505 blocks users

I have recently installed an ASA 5505. But now i have users that are being blocked/kicked from the internet. What can i do to prevent this? Here is the running config: Result of the command: "sh ...
0
votes
0answers
17 views

ASA 5510 Inter-Vlan routing issues

and thank you in advance for your help. I am having an issue where we are migrating from an ASA 5505 to an ASA 5510 and the software versions are quite different as well so they handle VLANs ...
0
votes
0answers
5 views

Unable to Apply Qos Policy map

I have a 20Mbps MPLS connection , when trying to apply the Qos Policy Map (wich is 60% for Silver traffic , and 40% for gold Traffic), i get the Following Error : "I/f FastEthernet0/0 class DSCP-AF31 ...
3
votes
1answer
36 views

Cisco ASA 5505 L2L vpn issue

this is my setup I already have a working L2L VPN between the sites I added the 10.10.0.0/24 to the object-groups that defines the internal network on the 1615 ASA And as a remote subnet on the ...
1
vote
1answer
40 views

Cisco ASA - Allowing external access to a secure server via RDP

I am new to the forums and really hope someone can help me. I am pulling my hair out! I have posted on both the Cisco forums and Windows forums in hopes anyone can suggest something but no one has ...
5
votes
2answers
117 views

How to allow UDP broadcast between interfaces on a Cisco ASA 5506-X

I have a CISCO ASA 5506-X with 4 configured interfaces and a set of access-lists etc. It is configured via CLI and is running in routed mode, not transparent. Everything is running well, but now I ...
0
votes
0answers
9 views

Diffie Hellman Group 20 Cisco Asa

It seems to be that I am a little bit lost in the scrap of documentation. I am looking out for a new ASA Appliance that supports lvl 20+ Diffie Hellman. But I cannot find any documentation if there is ...
0
votes
1answer
14 views

Cisco ASA5505 compatible RAM

I have a Cisco ASA5505 which I've acquired. It boots up first time successfully, and works without issue, however as soon as I reboot, it fails to boot with the flashing light sequence which indicates ...
0
votes
0answers
21 views

Packet Tracer 6.1.1 ISAKMP command not available

I am just going around in circles trying to configure a site to site VPN using the CLI on the ASA 5505 in Packet Tracer 6.1.1 When I am configuring isakmp the command just do not seem to be abailable ...
0
votes
1answer
27 views

Joining computers to domain with ASA firewall in place

I have an ASA firewall (inside interface ip=10.15.15.1 and outside int=192.168.3.1). DNS server is seating on the inside of the ASA. All PCs inside are able to join to domain but the ones outside of ...
0
votes
0answers
144 views

ASA Certifiate does not match the server name

I am trying to install a certificate on my Cisco ASA 5515, It has my local windows 2012 CA as a trusted CA. The domain has also had this CA applied to their trusted root. When ever i try and connect ...
1
vote
0answers
62 views

Is it possible to access inside server using outside address from dmz an a Cisco ASA

We have a Cisco ASA 5506-X (running ASA 9.5(1)) and a /28 public network. The first available address in the public network is assigned to the outside interface of the ASA and has NAT/PAT to several ...
0
votes
0answers
15 views

About to buy Cisco ASA 5506-X [duplicate]

I'm about to buy my first Cisco router and intend to buy the Cisco ASA 5506-X. From reptuation, I've rightly or wrongly, got the impression that Cisco love to bolt on subscriptions for things. When ...
0
votes
0answers
15 views

Can't change Cisco ASA Easy VPN Server Address - no changes were made

I am trying to update an Easy VPN Server address (it is changing) via ASDM, however when I enter the new address and click Apply it says No changes were made. Any ideas how I can change this please? ...
0
votes
0answers
14 views

IP Routing for VPN Failover on ASA - Did I miss anything? Is there another method?

To handle the 4x VPNs I plan to use the following scenario for Routing: Prefered Order for VPN connection: ISP1<-->ISP3 ISP1<-->ISP4 ISP2<-->ISP3 ISP2<-->ISP4 Example Site ...
0
votes
0answers
50 views

No web access behind Cisco Router - Connection denied due to NAT reverse path failure

I have a small network behind a Cisco ASA 5505. From a computer on the network, I can't even ping 8.8.8.8. Web browsing also fails with a "DNS probe finished no internet" error. I'm getting a lot of ...
0
votes
0answers
49 views

The proper way to create a VPN tunnel with one static host and one dynamic host

Note: I have never attempted this before trying today but I knew it was possible due to research online. So I gave it a try and got it to work... I have one static host (let's call it HOST_S) which ...
0
votes
1answer
95 views

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
0
votes
0answers
19 views

ASAs are clustered. No WCCP. How do i forward all traffic to my Mcafee Web Gateway

Just like the question states. We have clustered ASAs so WCCP is not available (news to me) I need to forward all web traffic from a specific range to our web gateways aka proxy. proxy is listening ...
3
votes
0answers
139 views

VLAN Communication between Cisco ASA 5510, and VMWare ESXi 5.5

I've having a problem, where my Cisco ASA 5510-v8.2 can't communicate with VM's in a VLAN specific port group. The Cisco ASA is currently sitting in front of a group of VM's that have public IP's. ...
0
votes
1answer
36 views

Cisco ASA access-lists redundant entries

I need to modify existing configuration of the CISCO ASA. While analyzing the configuration I noticed something that looks redundant to me. I would like to see if somebody can confirm my doubts. ...
0
votes
2answers
138 views

Problems with installing Cisco ASDM on a Windows Server 2008 R2

I try to get this as short as possible. My company has a computer with the Cisco ASDM-IDM Launcher on it with which we access our Firewall (Type ASA 5505). Now we want to install the ASDM on our ...
0
votes
0answers
308 views

Cisco ASA 5505 cannot ping from inside to outside

Hi everyone and thanks in advance for all the help. I'm having some issue getting my cisco firewall (asa 5505) to ping between zones. The inside zone won't ping with the outside zone and vice versa. ...
0
votes
0answers
14 views

Static routing ISSUE

I have two subnets 10.10.10.216/29, 10.10.10.10.224/29 from the ISP IN firewall assign the IP address like: interface e0/0 nameif outside ip address 10.10.10.218 255.255.255.248 ! interface e0/1 ...
0
votes
0answers
141 views

Cisco ASA 302014 syslog explaination

Can someone please explain the format of cisco asa syslog 302014 and more specifically the difference between idfw_user and AAA user? The message format is shown below: Error Message %ASA-6-302014: ...
1
vote
1answer
91 views

Asterisk behind Cisco ASA 5505

I'm in the process of upgrading from an old WRT54GL running Tomato to a Cisco ASA 5505, versioning as follows: Cisco Adaptive Security Appliance Software Version 9.1(5)21 Device Manager Version ...
0
votes
0answers
56 views

Cisco ASA 5505 access external IP address from internal

Got a bit of a head scratcher. ASA Version: 8.3(1) ASDM Version: 6.3(1) So I have an ASA 5505 with 3 interfaces (Inside, outside and Hosting). The inside interface has the IP range of 10.0.0.X and ...
1
vote
0answers
40 views

Cisco ASA l2l tunnel established, can receive pings but cannot reply

I'm a bit new to managing a Cisco ASA appliance and I'm doing my best to learn, however I got a problem here. Long story short, we are trying to connect a hospital's ADT HL7 feed to our remote ...
0
votes
1answer
84 views

Cisco ASDM issue “cannot open device”

I've just gotten my ASA 5510 set up to run AnyConnect VPN (w/ client). Unfortunately, it appears that I broke whatever allows the ASDM to connect in somewhere during that process. I get a "cannot open ...
0
votes
0answers
35 views

ASA 9.1 NAT Rule issues

I added this NAT rule on my 5510 ASA object network SHF-NY-DC01 host 192.168.1.50 nat (Inside,Outside) static interface service tcp ldap 6699 access-list inbound extended permit tcp any object ...
0
votes
0answers
91 views

Cisco ASA SYN timeout due to SSL errors?

One of our clients is attempting to connect to our AWS hosted websites through their websense proxy and ASA firewall (some use Palo Alto firewall instead). While we and others can access the sites ...
0
votes
0answers
114 views

Cisco ASA 5505 Split Tunnel Multiple Networks Not Working

I have an ASA 5505 and cannot get Internet access for VPN users. Config Layout is specified below. ASA (10.15.0.1)-->(10.15.0.2) Core Switch (10.5.1.0) Below is my config. ...
0
votes
0answers
75 views

VMware ESXI Behind ASA5506-Xs using Public IP is Not Communicating

Here is the lay of the land. Everything works but I cannot get data flow from ESXI Server or it's VM's I want them using public addresses from behind the router. The Vmware ESXI Hypervisor on a Bare ...
1
vote
1answer
45 views

Multiple public IPs routed via Cisco ASA to Proxmox VMs

I have a network with IP 199.221.2.136 (/29). I would like the Cisco ASA5505 [1] to work on .137 as router and use two public IPs (.138 and .139) on two VMs on a Proxmox server. Not sure how to route ...
0
votes
0answers
86 views

Unable to ping or RDP to servers via remote access VPN after DNS server change Cisco ASA

We have a setup here were users can remote into our network via VPN and then remote to their desktops. This was all working fine. The other day, we moved DNS from one server to another. I changed ...
1
vote
0answers
53 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > ...
1
vote
1answer
203 views

Multiple DHCP servers in multiple subnets, one DNS server

I have existing network with two subnets - one is the main company subnet (192.168.1.0/24), the other is completely separate VLAN for Guest Wireless and BYOD devices (192.168.2.0/24). There's Windows ...
0
votes
0answers
46 views

IPSec tunnel through ASA from specific IPs

I'm having some difficulty getting an IPSec tunnel to work through an ASA5510 that is already configured with a number of different tunnels that it terminates, as well as individual VPN clients. ...
0
votes
1answer
264 views

Cisco ASA 5550 rebooted itself, logs cleared

we had Cisco ASA5550 in Active/standby mode which worked without any issue for over 1 year. Recently, we started having issue where the VPN tunnels would drop to sites and have internet outages. We ...
0
votes
1answer
218 views

Wireless authentication with DD-WRT, Cisco and Microsoft

I'm looking for a way to authenticate my wireless users beyond them just knowing the wireless password. Ideally they would join the access point then get dumped to the login portal that they'd have to ...
0
votes
1answer
82 views

What is the proper way to create a vlan?

My goal is to create a separate VLAN, that will be isolated from the rest of the office, I just want them to have internet. Normal pc stations x1 HP Procurve switch V1910 x1 cisco asa 5512-x What ...
0
votes
1answer
162 views

ASA5505 don't allow FTP traffic

I'm new to CISCO and ACLs and NATs but I''m willing to learn. I am having problems allowing FTP access through my ASA5505 ASA 9.2 (2) ASDM 7.3(3) This is my problem, I have a domain which has my ASA ...
3
votes
0answers
521 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
0
votes
0answers
29 views

Routing and VPN Setup

The network setup is as follows: Router: eth0 1.1.1.1 (outside) eth1 192.168.54.4 (inside) eth1 10.54.4.4 (inside) Cisco ASA5505 192.168.54.1 (inside) 10.54.4.1 ...
4
votes
0answers
94 views

Cisco ASA failback to preferred IPsec peer

I just configured my Cisco ASA 5505 to failover to a backup internet line when the main outside interface is down. This all works fine. Also, I have a site-to-site IPSEC VPN tunnel from this ...