The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (1)

0
votes
0answers
19 views

IP Routing for VPN Failover on ASA - Did I miss anything? Is there another method?

To handle the 4x VPNs I plan to use the following scenario for Routing: Prefered Order for VPN connection: ISP1<-->ISP3 ISP1<-->ISP4 ISP2<-->ISP3 ISP2<-->ISP4 Example Site ...
0
votes
0answers
63 views

No web access behind Cisco Router - Connection denied due to NAT reverse path failure

I have a small network behind a Cisco ASA 5505. From a computer on the network, I can't even ping 8.8.8.8. Web browsing also fails with a "DNS probe finished no internet" error. I'm getting a lot of "...
0
votes
0answers
72 views

The proper way to create a VPN tunnel with one static host and one dynamic host

Note: I have never attempted this before trying today but I knew it was possible due to research online. So I gave it a try and got it to work... I have one static host (let's call it HOST_S) which ...
0
votes
1answer
181 views

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
0
votes
0answers
37 views

ASAs are clustered. No WCCP. How do i forward all traffic to my Mcafee Web Gateway

Just like the question states. We have clustered ASAs so WCCP is not available (news to me) I need to forward all web traffic from a specific range to our web gateways aka proxy. proxy is listening ...
3
votes
0answers
185 views

VLAN Communication between Cisco ASA 5510, and VMWare ESXi 5.5

I've having a problem, where my Cisco ASA 5510-v8.2 can't communicate with VM's in a VLAN specific port group. The Cisco ASA is currently sitting in front of a group of VM's that have public IP's. ...
0
votes
1answer
44 views

Cisco ASA access-lists redundant entries

I need to modify existing configuration of the CISCO ASA. While analyzing the configuration I noticed something that looks redundant to me. I would like to see if somebody can confirm my doubts. ...
0
votes
2answers
307 views

Problems with installing Cisco ASDM on a Windows Server 2008 R2

I try to get this as short as possible. My company has a computer with the Cisco ASDM-IDM Launcher on it with which we access our Firewall (Type ASA 5505). Now we want to install the ASDM on our ...
0
votes
0answers
609 views

Cisco ASA 5505 cannot ping from inside to outside

Hi everyone and thanks in advance for all the help. I'm having some issue getting my cisco firewall (asa 5505) to ping between zones. The inside zone won't ping with the outside zone and vice versa. ...
0
votes
0answers
16 views

Static routing ISSUE

I have two subnets 10.10.10.216/29, 10.10.10.10.224/29 from the ISP IN firewall assign the IP address like: interface e0/0 nameif outside ip address 10.10.10.218 255.255.255.248 ! interface e0/1 ...
0
votes
0answers
268 views

Cisco ASA 302014 syslog explaination

Can someone please explain the format of cisco asa syslog 302014 and more specifically the difference between idfw_user and AAA user? The message format is shown below: Error Message %ASA-6-302014: ...
1
vote
1answer
159 views

Asterisk behind Cisco ASA 5505

I'm in the process of upgrading from an old WRT54GL running Tomato to a Cisco ASA 5505, versioning as follows: Cisco Adaptive Security Appliance Software Version 9.1(5)21 Device Manager Version 7.4(...
0
votes
0answers
99 views

Cisco ASA 5505 access external IP address from internal

Got a bit of a head scratcher. ASA Version: 8.3(1) ASDM Version: 6.3(1) So I have an ASA 5505 with 3 interfaces (Inside, outside and Hosting). The inside interface has the IP range of 10.0.0.X and ...
1
vote
0answers
59 views

Cisco ASA l2l tunnel established, can receive pings but cannot reply

I'm a bit new to managing a Cisco ASA appliance and I'm doing my best to learn, however I got a problem here. Long story short, we are trying to connect a hospital's ADT HL7 feed to our remote ...
0
votes
1answer
134 views

Cisco ASDM issue “cannot open device”

I've just gotten my ASA 5510 set up to run AnyConnect VPN (w/ client). Unfortunately, it appears that I broke whatever allows the ASDM to connect in somewhere during that process. I get a "cannot open ...
0
votes
0answers
55 views

ASA 9.1 NAT Rule issues

I added this NAT rule on my 5510 ASA object network SHF-NY-DC01 host 192.168.1.50 nat (Inside,Outside) static interface service tcp ldap 6699 access-list inbound extended permit tcp any object SHF-...
0
votes
0answers
147 views

Cisco ASA SYN timeout due to SSL errors?

One of our clients is attempting to connect to our AWS hosted websites through their websense proxy and ASA firewall (some use Palo Alto firewall instead). While we and others can access the sites ...
0
votes
0answers
142 views

Cisco ASA 5505 Split Tunnel Multiple Networks Not Working

I have an ASA 5505 and cannot get Internet access for VPN users. Config Layout is specified below. ASA (10.15.0.1)-->(10.15.0.2) Core Switch (10.5.1.0) Below is my config. ---------------------...
0
votes
0answers
110 views

VMware ESXI Behind ASA5506-Xs using Public IP is Not Communicating

Here is the lay of the land. Everything works but I cannot get data flow from ESXI Server or it's VM's I want them using public addresses from behind the router. The Vmware ESXI Hypervisor on a Bare ...
1
vote
1answer
61 views

Multiple public IPs routed via Cisco ASA to Proxmox VMs

I have a network with IP 199.221.2.136 (/29). I would like the Cisco ASA5505 [1] to work on .137 as router and use two public IPs (.138 and .139) on two VMs on a Proxmox server. Not sure how to route ...
0
votes
0answers
118 views

Unable to ping or RDP to servers via remote access VPN after DNS server change Cisco ASA

We have a setup here were users can remote into our network via VPN and then remote to their desktops. This was all working fine. The other day, we moved DNS from one server to another. I changed ...
1
vote
0answers
63 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > 255.255.255....
1
vote
1answer
356 views

Multiple DHCP servers in multiple subnets, one DNS server

I have existing network with two subnets - one is the main company subnet (192.168.1.0/24), the other is completely separate VLAN for Guest Wireless and BYOD devices (192.168.2.0/24). There's Windows ...
0
votes
0answers
57 views

IPSec tunnel through ASA from specific IPs

I'm having some difficulty getting an IPSec tunnel to work through an ASA5510 that is already configured with a number of different tunnels that it terminates, as well as individual VPN clients. ...
0
votes
1answer
589 views

Cisco ASA 5550 rebooted itself, logs cleared

we had Cisco ASA5550 in Active/standby mode which worked without any issue for over 1 year. Recently, we started having issue where the VPN tunnels would drop to sites and have internet outages. We ...
0
votes
1answer
343 views

Wireless authentication with DD-WRT, Cisco and Microsoft

I'm looking for a way to authenticate my wireless users beyond them just knowing the wireless password. Ideally they would join the access point then get dumped to the login portal that they'd have to ...
0
votes
1answer
87 views

What is the proper way to create a vlan?

My goal is to create a separate VLAN, that will be isolated from the rest of the office, I just want them to have internet. Normal pc stations x1 HP Procurve switch V1910 x1 cisco asa 5512-x What I'...
0
votes
1answer
225 views

ASA5505 don't allow FTP traffic

I'm new to CISCO and ACLs and NATs but I''m willing to learn. I am having problems allowing FTP access through my ASA5505 ASA 9.2 (2) ASDM 7.3(3) This is my problem, I have a domain which has my ASA ...
3
votes
0answers
704 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating 1.2.3....
0
votes
0answers
29 views

Routing and VPN Setup

The network setup is as follows: Router: eth0 1.1.1.1 (outside) eth1 192.168.54.4 (inside) eth1 10.54.4.4 (inside) Cisco ASA5505 192.168.54.1 (inside) 10.54.4.1 (...
4
votes
0answers
117 views

Cisco ASA failback to preferred IPsec peer

I just configured my Cisco ASA 5505 to failover to a backup internet line when the main outside interface is down. This all works fine. Also, I have a site-to-site IPSEC VPN tunnel from this ISP-...
0
votes
1answer
3k views

Cisco ASA site-to-site VPN up but no traffic

I currently have site to site VPN tunnel up between Cisco ASA 5550 & Cisco ASA5506-X. I can see the vpn tunnel is up on both end but no traffic is passing through. Cisco ASA 5550 is receiving ...
1
vote
0answers
111 views

Cisco ASA 5505 no NAT

I have a cisco asa 5505. The outside and inside IPs are private IPs so I do not want to NAT the inside IPs as they go out the Outside interface (there is a router upstream of the ASA 5505. Would I do ...
1
vote
0answers
102 views

Allow Ports 80, 443 and 81 through ASA 5510

We are switching our VoIP provisioning method from TFTP to HTTP provisioning and have been asked by the VoIP provider to allow inbound access on ports 80, 81 and 443 from their two network networks on ...
1
vote
1answer
74 views

CISCO ASA: Add specific command to a privilege level

i am facing the following issue, created a new account with a "read-only" access on a CISCO ASA 5510. This account will be used in a script that will back up the running-config of the ASA. the ...
0
votes
0answers
181 views

asa5512x: ipsec site-to-site vpn with tcp instead of udp? is it possible?

the cisco documentation for ASA 9.1 (I have 9.1.2) seems to imply that ipsec vpn with tcp/ip is only for remote clients, not site to site vpn. But I repeatedly see people mention vpn over tcp to ...
2
votes
0answers
95 views

Tethered VPN on Macbook fails to connect, but standard VPN over WiFi works [closed]

I have a MacBook using the Cisco client and it works fine except when I use the special Mac/iPad ability to tether over the iPad data connection. For those that are unfamiliar with this, the Mac and ...
0
votes
1answer
56 views

cisco asa 5512-x policing

I have a single 100mb leased line that will be shared by three unrelated companies. We are looking to buy a cisco ASA 5512-X and I need to use policing to ensure that each company receives 1/3 of ...
1
vote
1answer
55 views

Cisco ASA separating networks

We are using a Cisco ASA 5505 running ver 9.0 to separate our corporate (inside) network from a dev lab (outside) network. We would like to use NAT or PAT to forward the inside interface IP to a set ...
-1
votes
3answers
2k views

Why can i not ping my host behind the firewall. Cisco asa 5505 [closed]

Can anyone please help me to figure out what in my configuration of the Cisco asa 5505 is wrong or missing. I have multiple host behind my firewall these hosts run different websites on port 80. I am ...
3
votes
1answer
944 views

Nmap external scan shows port open, ASA says port is not open, but do get an socket

Folks, have a weird one, need your expert help. For one of our heavily used external facing server which came up in an audit, nmap -Pn scan shows the following: Starting Nmap 5.51 ... Host ...
0
votes
0answers
1k views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
0answers
121 views

Cisco ASA 5505 VPN users access to local LAN denied

I have this running config: : Saved : ASA Version 8.2(5) ! hostname TESTATES domain-name TEST.com names name 192.168.1.0 AsusWireless ! interface Ethernet0/0 switchport access vlan 2 ! interface ...
2
votes
0answers
1k views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
0
votes
2answers
493 views

HttpServletRequest.getRemoteAddr() always returns 127.0.0.1

We're attempting to identify where specific requests are coming from inside our Java application. We have changed the log files to include the IP address and we're using httpServletRequest....
-1
votes
1answer
394 views

Find source(s) of dropped packages in Cisco ASA GUI

we are using pair of ASA 5520 Firewalls with ASDM 6.4. Can someone enlighten me, how to find out which is(are) the source or target ip(s) when we got a hugh bunch of dropped packages come in (by ASDM ...
0
votes
1answer
114 views

Need help understanding a bandwidth restriction on a Cisco ASA

We have a guest wireless network here and it's bandwidth is limited too 1 Meg per second. I did not configure this and am trying to pick it up. I've found these lines in the cisco config but i'm not ...
1
vote
5answers
217 views

Multiple Computers Running IIS with a Singular Public IP how to handle incoming communications?

At our company, we have three separate servers that house IIS currently. Each of these three servers have the same public IP address and essentially reside on the same network under different subnets. ...
0
votes
0answers
373 views

Cisco ASA firewall blocking requests to internally hosted DNS server

I have a DNS server behind a Cisco ASA firewall. The Cisco firewall is performing NAT. When inside the network, I can NSLOOKUP directly to the server. When the client is external, requests time out. ...
0
votes
2answers
327 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...