The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality as standard. This is Cisco's replacement line for the PIX range, but has additional functionality, mostly related to security, through additional modules. Cisco Product page Model Comparison
0
votes
1answer
29 views
Cisco asa 5505 to use internal DNS server
I have just installed and configured a ASA 5505 firewall (basic license) which has 3 VLANs (outside, trusted, untrusted) and the configuration is really basic.
Outside is for internet, trusted is ...
2
votes
2answers
45 views
How to monitor the port state on ASA 5505
On a Cisco router when you unplug a cable from an interface I normal see debug "int fa0/3 line up" etc
Is there some command to see this on an ASA 5505? I'm SSH'ing into it, do I need to use console ...
0
votes
1answer
54 views
What sort of network problems can a single NIC host cause?
A remote office has a Cisco ASA 5505 connecting the LAN to our HQ LAN via VPN.
When a particular Windows XP PC is connected to the ASA via a switch, the VPN tunnel drops, and after a short while, all ...
2
votes
1answer
33 views
Monitoring IPSEC traffic on Cisco ASA
I have cacti monitoring a bunch of things on my Cisco ASA 5505s, but nothing to indicate the level of traffic flowing through VPN tunnels on them.
Is this data available through SNMP on the ASA, and ...
0
votes
1answer
76 views
Cisco ASA - Enable communication between same security level
I have recently inherited a network with a Cisco ASA (running version 8.2).
I am trying to configure it to allow communication between two interfaces configured with the same security level ...
2
votes
1answer
50 views
ASA Static NAT Understanding
I have an ASA configured as follows;
Inside: 192.168.0.254/24
Outside: 10.0.0.1/29 (This is routed to the ASA)
global (outside) 1 interface
global (outside) 2 10.0.0.2
nat (inside) 1 0.0.0.0 0.0.0.0
...
1
vote
1answer
32 views
Add Port Forward to ASA5505 with IPSEC Tunnel
I have an ASA 5505 on 8.2 in the field already working. It has two interfaces, LAN/inside and WAN/outside. There is an L2 site-to-site IPSec tunnel configured from the outside interface of the local ...
1
vote
1answer
55 views
Possible to connect (trunk?) two Cisco 3560 switches from remote locations?
Disclaimer: I'm not a network guru but I do learn quickly! Bear with me.
Situation: I have a colo setup which is comprised of several servers, a iscsi SAN, connected with a Cisco 3560G switch, ...
0
votes
0answers
99 views
VPN Trunk Between Cisco ASA 5520 and DrayTek Vigor 2930
I'm a bit of a VPN newbie, so please go easy on me ...
I'm trying to use the VPN trunking capabilities of the DrayTek Vigor 2930 firewall to bond two IPSec VPN connections to a Cisco ASA 5520 device ...
0
votes
1answer
38 views
ASA IPSec tunnel up, but logging errors?
I am getting the following errors on an ASA;
Jan 24 2012 17:15:13 ASA1 : %ASA-7-714003: IP = 1.2.3.4, IKE Responder starting QM: msg id = 5293ff7c
Jan 24 2012 17:15:13 ASA1 : %ASA-7-713236: IP = ...
1
vote
1answer
62 views
Cisco ASA ssh portforwarding with custom port
Cisco ASA 8.4(1)
ADSM 6.4
I'm struggling with forwarding SSH connections from the outside into a server inside my network on a non standard port.
What would the command line look like if I wanted ...
0
votes
1answer
57 views
DHCP Not Working Issue - Cisco ASA 5520
I have abit of an odd problem and a rather complex odd network however im going to make it as simple as possible just incase this is an easy fix.
I have two IP Ranges in our network
192.168.0.0 for ...
3
votes
1answer
33 views
Traffic blocked between VLANs despite security-level difference on ASA 5510
I have an Cisco ASA 5510 configured thus:
interface Ethernet0/0
description ### Trunk for inside, wlan ###
speed 1000
no nameif
no security-level
no ip address
interface Ethernet0/0.10
...
2
votes
1answer
234 views
Cisco ASA 8.4 port forwarding
I am having trouble port-forwarding on an Cisco ASA from a host on the internet to a host on the internal network. The outside interface of the ASA is assigned via DHCP. Is there something else that ...
0
votes
1answer
40 views
Is this the proper way to set up VPN tunnels for this network topology?
Below is the network topology I will be working with. The left just shows that all sites have a single internet connection. The right shows how I would be setting up the VPN tunnels. The main concern ...
0
votes
2answers
84 views
Connect internal users to ASA outside interface https server
I would like internal users to be able to connect to the ASA's outside interface https server, to be able to download the AnyConnect client while in the office. Currently, this isn't working.
I've ...
1
vote
2answers
121 views
What does the Cisco ASA command “management-access” do?
I'm working with a Cisco ASA 5510. I changed the management interface to a different interface. I used the command "management-access" to get the new interface working, but the old interface ...
0
votes
1answer
214 views
How do you change a Cisco ASA 5510 management interface?
I want to add a redundant interface to my Cisco ASA 5510. The management interface is currently using Ethernet0/1 (10.1.25.254/24) one of the interface I want to use for the redundant interfaces. So ...
0
votes
2answers
58 views
ASA 5505 VPN Passthrough - Server 2008
We have an ASA5505 and it is the backbone of our network that controls the DHCP/NAT rules/Firewall etc.
We are having issues with VPN users being able to access local systems.
We are able to ping ...
1
vote
1answer
64 views
Cisco ASA Shaping
I am trying to traffic shape on my 5505. I can do the usual policing but as always with policing, it goes up and down and doesn't result in the best results.
I get the message about ERROR: 'shape' ...
0
votes
1answer
63 views
Server 2008 R2 VPN clients are unable to ping netbios names
I just setup the VPN yesterday. Our current setup:
Internet> asa5505 (setup with the NAT rules ect to forward traffic to the VPN server)> Server 2008 R2 server> network.
We have multiple DCs and AD ...
1
vote
1answer
143 views
ASA 5505 unable to open up ASDM or https://(router IP here)
When I try to load our ASA's ASDM client I get the error "Unable to launch device manager from 192.168.10.1"
I have tried verifying HTTP is enabled and when I go to https://192.168.10.1 it no longer ...
2
votes
3answers
59 views
ASA: How to connect server with a external IP address already assigned?
Any ideas how this can be done on a ASA? There was a sonicwall in place but it just died and we do not have a replacement besides this ASA. The 24.172.x.132 is a spam filter and I can't change the ...
2
votes
1answer
86 views
Linux does not get IPv6 default gateway from Cisco ASA5510 on autoconf
My ASA 5510 has the following configuration for an interface. My Ubuntu box (2.6.35) connected to this network will correctly autoconf an IPv6 address, but it will not set a default route.
interface ...
2
votes
1answer
50 views
Blocking GotoMyPc on ASA 5505
I am trying to block GotoMyPC traffic using a Cisco ASA 5505.
On gotomypc.com they say you can block all traffic to poll.gotomypc.com to stop all access.
What I have done is create a network group ...
0
votes
1answer
62 views
ASA 5505 isolating networks per interface but keeping access to the server
We have an asa5505 and I need to figure out how to isolate one physical interface to the other but remaining with access to our servers. my original thought was to put them on the same subnet as the ...
3
votes
1answer
83 views
Cisco ASA 5505, tcp window scaling (rfc1323)
I have a very odd issue with our cisco firewall,
If on our osx machines we run the following to disable window scaling support:
sudo sysctl -w net.inet.tcp.rfc1323=0
We see near 40% ...
0
votes
0answers
82 views
Internet Download Speed Slow behind Cisco ASA Firewall
It used to work fine until my ISP increased the bandwidth from 10/10 to 15/15, I am only getting 5/10. Isolating the connection directly to a laptop gave the correct speed.
ISP says it is a firewall ...
1
vote
1answer
141 views
How do you configuring vlans/trunk on a Cicso ASA 5510
I have a Cicso ASA 5510 that I want to connect to 2 Dell PowerConnect 5500 linked in a Switch Stack. I want to connect a trunking line to each switch so if one switch dies the other works. The ...
0
votes
1answer
35 views
Cisco access-list confusion
I'm having troubles implementing access-lists on my asa 5510 (8.2) in a way that makes sense for me.
I have one access-list for every interface i have on the device. The access-lists are added to ...
0
votes
2answers
89 views
Will traffic get through a standby firewall if the active firewall's interface to the gateway goes down?
Here is the scenario. I have two ASA 5510's in Active/Standby. Each of them has a single uplink to one of two routers (HSRP1 and HSRP2) configured in HSRP. Disaster strikes and the interface ...
2
votes
1answer
73 views
Cisco ASA force failover from command line
I have 2 independent traffic routes to my servers. They are serviced by a failover Cisco ASA5505 pair. However, should my gigabit switch on the main route fail (or main internet feed), the ASA will ...
1
vote
1answer
74 views
ntop to analyse bandwidth usage on multiple ASA 5505
I have set up a netflow server at our data centre, which is connected via VPN to ~40 remote offices using Cisco ASA 5505. The aim is to analyse usage data and find out exactly how the remote ...
0
votes
1answer
52 views
How to adjust ASA Failover Times?
I want to adjust my failover poll timing.
The proposed column is what I am wanting to set it up as.
I believe the following commands will obtain what I want from the first two rows but Im not sure ...
0
votes
1answer
146 views
How to limit a VPN user to just one host?
I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
1
vote
0answers
34 views
NAT confusion regarding cisco ASA5510
I'm setting up my first cisco firewalls. A little information first:I have two asa5510 setup in a working active/standby pair.
From my ISP i have two public subnets. A /29 and a /26. On my DMZ ...
2
votes
2answers
109 views
Why do I start at privilege level 1 when logging into a Cisco ASA 5510?
I have created a test user that is set to privilege 15 in the config:
username test password **************** encrypted privilege 15
When I log in to the ASA 5510 I am in privilege 1 according to ...
0
votes
0answers
43 views
Cisco ASA log analyzer
exist any log analyzer for Cisco ASA? Preferably something you've try and you can say that is good and easy to use.
Thanks!
2
votes
2answers
89 views
ASA and cisco vs NSA sonic firewall
Currently I’m trying to structure our network to fully support and be redundant with BGP/Multi homing.
Our current company size is 40 employees but the major part of that is our Development ...
2
votes
1answer
87 views
Firewall with layer 3 switch or without it?
I am trying to make a simple network architecture for a small company.
One of the sites is built of a firewall (to create a DMZ, to make the VPN between the sites) and three switches, like in link ...
0
votes
1answer
38 views
ASA5505 isolating department
We have an ASA5505 that is our main firewall/connection between departments.
Currently I need to look for a way to make so our development team can access our internal servers but they are not able ...
-5
votes
1answer
133 views
Internet user can not access my web server on DMZ [closed]
Possible Duplicate:
Outside or Internet users canot reach my dmz
I did a new configuration in my ASA 5520 v7 and so bellow is the latest sh run so you can have a better idea.
My ...
1
vote
1answer
312 views
Is this the correct config for a Remote Access VPN for ASA 8.4?
First time configureing remote access VPN for 8.3 / 8.4 so the NAT and VPN commands are a bit diffrent for me.
Below is the VPN config and the coresponding NAT to NO NAT the IP space. If someone ...
1
vote
2answers
123 views
BGP/Multi Homing
We currently have an ASA5505 and are getting a 2nd ISP (both ISPs will have 20 up/down dedicated fiber).
We need to be able to setup BGP/Multi-homing but I have found that the ASA's do not support ...
0
votes
1answer
76 views
Outside or Internet users canot reach my dmz
Hi everyone out there.
I have configured my aa 5520 v7. and so far im facing a problem in my connection and therefore i wish someone here can help me to sort it out.
wright now Internal network can ...
0
votes
1answer
126 views
Dual ISPs - Load balancing
We currently have 1 ISP and are adding a second. I need to load balance this into our current network so it shares the bandwidth between our 2 ISPs. We have a total of about 10 external IP addresses ...
0
votes
2answers
195 views
Cisco ASA - Configure External Access to a Server
I'm trying to configure my ASA (ASA 8.4(2), ASDM 6.4(5) ) to allow external access to a server (using RDP). I've tried everything, but it doesn't seem to be working. I'm sure it is something simple ...
2
votes
3answers
200 views
Cisco ASA 5505 :: Techniques for limiting consumed hosts (max 10 with base license)
Was not aware that ASA 5505 base license restricts number of concurrent hosts to 10 (RTFM, I know). Running a "show local-host" I see my host count at 8, a bit too close for comfort with a production ...
3
votes
1answer
85 views
cisco asa reloading
After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
1
vote
2answers
362 views
“NAT reverse path failure” ASA 8.3
Forgive me, as I'm not very experienced with ASAs, but I believe what I have configured should be working.
I have an ASA 5510 running version 8.3(2), which is connected to internal, external, and dmz ...
