The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

0
votes
0answers
7 views

Include multiple sub-interfaces in Cisco ASA for VPN tunnel

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces. Say, In Cisco ASA 5550, I created multiple subinterfaces with VLAN ID as below: Inside, int0/1 : ...
0
votes
1answer
15 views

ASA is not forwarding packets to egress interface

We are seeing some very strange behaviour from our Cisco ASA 5505 running 9.1(2) We have a SIP PBX inside our network. It's got a bit of an odd configuration, it listens for inbound SIP requests for ...
3
votes
2answers
84 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...
0
votes
0answers
44 views

Cisco ASA 5510 needs “clear arp <Interface>” periodically to reach a single host

ASA 9.0(3) The symptom is that I can ping from the ASA to any other host in that interface's subnet, save one particular host (that host can ping the interface on the ASA however). If I do "clear arp ...
0
votes
1answer
33 views

Secondary IPs on DMZ machines not working

I am moving some virtual machines from my DMZ in a bladecenter over to my new cisco UCS. We are using Hyper-V, and are running Server 2012 on the old bladecenter, and Server 2012r2 on the new UCS. ...
0
votes
0answers
23 views

ASA 5515-X: Policy based NAT for dedicated uplink

We have bought a Cisco ASA 5515-X and we have the following scenario. Current situation: GigabitInterface 0/0, IP via DHCP, ISP1, Coax, 100M up / 12M down, medium latency GigabitInterface 0/1, ...
0
votes
0answers
28 views

Amazon AWS Site-to-Site VPN doesn't allow concurrent pings

I have some strange behaviour with an AWS VPC site-to-site set up and would like some help to understand where my problem might be. Set Up I have a VPC with a private and public subnet, there is a ...
1
vote
1answer
36 views

vpn connection is OK but can't route some IPs

Our Network is laid out as in the diagram below PC1 can successfully connect to server 2 (with 10.120.20.x/24), and PC4 can successfully connect to server 1 (with 10.120.30.x/24). Our problem is ...
0
votes
0answers
20 views

Cisco ASA 5505 - IPSec remote VPN accessing secondary subnet

Layout: modem (pass through) -> Cisco ASA 5505 (Lan 192.168.10.1) -> (Wan 192.168.10.2) Netgear N600 Router (Lan 10.1.10.1) -> workstations (server=10.1.10.34) VPN connection to ASA no problem. I ...
0
votes
3answers
33 views

How to see traffic traversing a Cisco ASA by inside host?

I have a Cisco ASA 5515 running 9.1 and am interested in learning how I can see bandwidth usage by individual hosts. For instance, using MRTG I can see that my average bandwidth utilization is approx ...
1
vote
1answer
31 views

Cisco ASA VPN: Drop-reason: (acl-drop) Flow is denied by configured rule

During VPN reconfiguration we have met quite big issue with VPN traffic not passing to peer. Using packet-tracer we have have got following debug: Phase 1 to Phase 9 passed successfully. [...] ...
1
vote
1answer
37 views

Force Cisco ASA to change source port NAT

I have a 2 devices, a Cisco ASA and sitting behind it another device. Both the Cisco and the other device have IPsec tunnels but to different locations. I need to ensure that the source port of the ...
1
vote
1answer
78 views

cisco ASA 5505 l2tp vpn

I have a problem with cisco asa 5505 vpn configuration. I set l2tp for windows clients. I can connect to vpn but: when i have "use default gateway on remote network" on NIC enabled i have access to ...
1
vote
0answers
69 views

Configuring ASA 5510 for multiple port-forwarding using TCP-UDP service group

I'm currently trying to configure two different ASA 5510s to properly forward all ports used in h323 video conferencing to the proper video conferencing equipment setup on the internal network on each ...
0
votes
2answers
58 views

Routing between 2 networks and 2 routers

I have a WatchGuard XTM33 and a Cisco ASA 5505, current network is running off of the Cisco and I want to eventually migrate over to the WatchGuard using new IP scheme. ASA 192.168.111.1/24 WG ...
3
votes
2answers
84 views

Static public IP issue on Cisco ASA 5512x

This is our scenario: We have an Cisco ASA 5512x and we have 2 different Internet connections from different ISPs connected with it. ISP A is being used for the users browsing traffic(normal ...
0
votes
0answers
13 views

Lync Server 2010 remte users can not use audio or sharing features

Lync Server 2010 - no sip phones, but audio within the application Inside Audio/Video/Conferencing works Recently we were asked to turn on Remote Access (not federation) since users have leared ...
0
votes
2answers
72 views

How can I connect to a Cisco ASA5540 from Windows Server 2012 over IPSEC?

Given a windows server 2012 client (which I have under full administrator control), and an external Cisco ASA5540 router (which I don't), I'd like to connect to the router to access their internal ...
0
votes
0answers
22 views

Route AAA LDAP traffic from ASA through IPSEC-tunnel to Windows DCs

We have one Cisco ASA 5505 in our HQ responsible for connect our remote office with a IPSEC-tunnel and one ASA 5505 at the remote office. The Cisco ASA 5505 in our HQ is also responsible for VPN users ...
2
votes
1answer
61 views

How to set up Cisco AnyConnect VPN Client to only tunnel traffic for specific destinations?

I have an Ubuntu server that needs to be able to connect via Cisco AnyConnect VPN to another server for one of our applications. However, because we're using this server for multiple applications, we ...
0
votes
0answers
71 views

Cisco ASA not allowing DNS traffic to pass?

I have an ASA 5515 as my internet firewall. It is not allowing me to do NS Lookups from any internal DNS Servers, or clients. If I set my nslookup server to 8.8.8.8 (google DNS), I can resolve public ...
0
votes
1answer
36 views

Input traffic spikes on outside interface at same time every day

For the last two days I've had this issue where our internet connection SLOWS to a crawl and is almost unusable. I logged into our Cisco ASA 5500 (not very well versed with it) but I was able to see ...
0
votes
0answers
22 views

ASA/AnyConnect will only allow 53/udp to the DNS servers listed in the profile

I found a "bug/feature" in Cisco AnyConnect/ASA 5510: if a VPN client makes a query to udp/53 (DNS query) to any IP address that isn't listed as a DNS server in the VPN profile, then ASA drops this ...
1
vote
0answers
54 views

Broadcom NICs, Cisco ASA and ARP request collisions

First of all I am sorry for my english mistakes. Help me please to solve the problem with ARP request collision incidents. I have IBM BladeCenter E chasis with blade servers are installed in this ...
0
votes
0answers
85 views

Cisco ASA 5525 and multiple internet interfaces

I'm replacing a firewall this weekend with a pair of ASA 5525's. The network configuration is as follows :- Inside LAN - 192.168.1.x Internet 1 - 62.0.0.x Internet 2 - 52.0.0.x The currently ...
-2
votes
1answer
41 views

How do I allow data to span from port to port on a Cisco ASA [closed]

I'm running a Cisco ASA5520. I could have sworn I had this set up when I installed the system and checked the right boxes in the "Wizard" in Cisco's ASDM, but data only goes from port to port if it ...
0
votes
0answers
22 views

Tracking connection route with POST data

I have PHP running on client machines. They connect to a webserver using fopen and upload information stored in local databases. Everything works great, except for one group who uses AT&T cell ...
1
vote
1answer
72 views

TightVNC over VPN encrypted? [closed]

I'm using tightvnc to connect to my servers over a IPSEC VPN connection with split tunneling enabled. Is my communication with my servers via VNC encrypted or unencrypted?
0
votes
0answers
19 views

Is setting an access rule any to any permit the same as the implicit rule?

I have the default setup of outside=0, dmz=50, inside=100. I'm trying to allow the machines on the inside network to talk to each other over a certain port, but a packet trace shows that the acl is ...
0
votes
0answers
53 views

How To Stop Cisco ASA Spoof Attack

I have thousands of "Deny TCP reverse path check from 10.60.60.X to 10.60.6X.X on interface outside" The IP addresses for the source and destination hosts are all over the board, and the interface is ...
0
votes
0answers
94 views

Cisco ASA 5500 8.4-9.0 Port forwarding SIP

My setup is with an ASA using software version 9: PhoneServer - at IP 10.111.9.2 ASA firewall IP 10.111.9.1 and second interfaceIP 192.168.9.2 which connects to a Telco router having IP ...
1
vote
1answer
236 views

Cannot RDP from inside to dmz

I'm running an ASA 5505 with security plus I have internet access from the inside and dmz vlans I can Remote Desktop from inside to another machine on the inside I can ping inside machines and ...
2
votes
3answers
154 views

VLAN planning and questions

I currently manage an environment with IP addressing of 10.10.10.x/23. We have 3 VLANS set up, and I use that term very loosely. The reason I say I use the term loosely is, the 3 VLANS have full ...
0
votes
1answer
252 views

Cisco ASA 5500 - SIP ports other than 5060

Is it correct that the SIP inspection in the ASA 5500 firewalls only kicks in for traffic on port 5060? There is some hint at this, while not 100% definitive, on Cisco Docs - ...
0
votes
0answers
92 views

ASA failover mode switching from Active/Active to Active/Standby

We have two ASAs with failover set to Active/Active. This seems to work fine for everything we do except using VPN connections. It seems whenever the primary ASA fails over that all VPN connections ...
0
votes
0answers
27 views

Cisco ASA5505 Public IP Address

I am trying to configure a Cisco ASA5505. I am using the GUI start up wizard. When I assign the outside IP address to be a public IP address the configuration will work but after about 30 seconds the ...
0
votes
0answers
15 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
1answer
233 views

Cisco ASA Outside to Outside NAT (forward from one public ip to another public IP)

I have an ASA (A) with a set of public IPs (A1..A6). And I have another server S with a public IP (S1) . I want all traffic to A2:22 NATed (forwarded) to S1:22. (SSH is just an example here) If ...
0
votes
0answers
102 views

Cisco ASA 5505 Access Rules/NAT

I need to allow traffic from any IP to a specific port in an ASA 5505 using ASDM 7.1. I've already created an Access Rule to do this but I ran a Packet Tracer and it gets dropped due to an "implicit ...
0
votes
1answer
112 views

Cisco ASA vague error

I'm getting a very vague error from my cisco ASA that connects our VPN to a branch office running a cisco router. I was hoping some one could give me some incite into how I could possibly pull more ...
0
votes
0answers
29 views

Giving vpn users access to all connected sites

I have a cooperate network which is connected to the remote branches through MPLS network.I'm wondering is there any way that I can give access to VPN client users to access the resources on other ...
1
vote
2answers
118 views

Can I run commands from a file uploaded to my Cisco ASA 5500?

I have to run a lot of ACL/access-group and network-object commands, and I have found a 1024 character limit for each command - even if it spans multiple lines. In code, I use 1,000 chars as the ...
0
votes
1answer
87 views

Proxy servers and ASA5510

I am new to Cisco ASA5510 and need to configure it for following situation: Semi-isolated network 10.18.10.0/24 External excess is via high proxy server to ASA to low proxy server. Each proxy has 2 ...
5
votes
1answer
122 views

ASA5505 slow downstream, fast upstream on VDSL PPPoE

We have recently switched our ADSL2+ connection for a VDSL Connection in our office. The only configuration change I have made to the Cisco ASA for this change, was to change the username/password on ...
1
vote
0answers
454 views

Route two public (ISP assigned) subnets on 'outside' interface of Cisco ASA 5510

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection. The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by ...
0
votes
0answers
113 views

Cisco ASA 8.2, accessing an internal webserver with an external IP-address together with port translation

We have one web server, let's call it SERVER01. It is running two different web servers that both uses HTTPS, INTERNALAPP on port 443 and EXTERNALAPP on port 444. In a previous setup we had an old ...
0
votes
0answers
34 views

ASA 5510 Youtube bandwith limit

Just want to know is it possible to set the limit for youtube. eg I have 45MBPS link, most of the bandwidth consume by youtube only, so i want to limit youtube to 5mbps for all mean for complete ...
2
votes
1answer
66 views

ASA Static Route over PPPoE interface

I have an ASA5505 with two PPPoE connections. I wish to add a static route to route just a single subnet over the new PPPoE connection, but the ASA does not seem to allow routing over interfaces ...
3
votes
1answer
159 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
1answer
133 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...