Tagged Questions

The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

1
vote
0answers
242 views

Cisco SPA504G phone CDP/LLDP issue

Good morning everyone, Just recently signed up for the site because I'm looking for some help with an issue that's been plaguing me for about a week now. I hope I'm posting in the right place. If ...
0
votes
1answer
77 views

Cannot access Cisco ASA-5505 ASDN

I just got my network up-and-running. I would like the ASDN for some of my minions to be able to make minor changes without the need to contact me. This said, I have tried to enable it, and access ...
0
votes
1answer
144 views

Source of RST packet on ASA 5510

In reference to previous posts such as Finding source of RST packet on ASA 5505 I am not seeing any answers about how to FIX the RST from being sent by ASA; I only see discussion of how to provide a ...
2
votes
0answers
381 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
1
vote
0answers
167 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
0
votes
1answer
156 views

Corrupt file copy Windows 2012 -> VPN -> Windows 2012

I've getting problems copying files from one Windows 2012 server to another via Cisco ASA5505 VPN. I've had a similar setup with Win2008 servers & never saw the problem (same ASA5505 this end) ...
0
votes
0answers
205 views

Can Telnet be used to test Direct Push is open “long enough”

I am getting the event below in the Eventlog regarding Direct Push for Activesync. If it matters we have a Cisco ASA and a Citrix Netscaler. Event 1040 MSExchange Activesync The average of ...
2
votes
0answers
73 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
1
vote
2answers
804 views

Using a Cisco ASA 5505 to forward PXE (WDS) Requests

I have a Cisco ASA 5505 that uses around 5 NICS for different networks. Currently I'm using my ASA to route traffic as it's the only Cisco device I have capable of the small amount of routing ...
0
votes
1answer
474 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
2
votes
1answer
159 views

Add IP range to Cisco ASA 5505

I need to allow traffic through TCP/1494 and TCP/2598 (inbound & outbound) to IP range 10.1.25.1 to 10.1.25.254 within a Cisco ASA 5505. Can someone please help me with this? Under Cisco ADSM ...
2
votes
0answers
552 views

ASA5505, 9.1, Static NAT Port Range Forwarding

ASA5505 Version 8.4+ (Using 9.1).. Adding port range for static nat. object network server_x host 123.123.123.123 access-list outside_in extended permit tcp any object server_x range 1000 2000 ...
0
votes
0answers
20 views

Making Cisco IPSEC IKE KEY public

I have some OSX users that connect to our Cisco ASA VPN using the built in OSX VPN client. To configure this client I have to provide the Cisco IKE key. I am wanting to know if this key is something I ...
1
vote
1answer
586 views

LACP : Cisco ASA 5515 & Switch ProCurve 2920

I've two ASAs 5515 connected in failover Active/Stand by (on Gi0/5) My two ASAs are connected to two Switch ProCurve 2920 to have HA if something happens. So I plug something like that (don't pay ...
0
votes
1answer
778 views

ASA 5510 Site to Site VPN works in one direction

I have setup a site to site VPN connection between two Cisco ASA 5510. One site (let's call it A) can see the private network of the other site (site B), but site B cannot see the private network of ...
4
votes
1answer
134 views

Protecting an ASA in a multi tenant environment

I'm interested to know what best practices are for setting limits and policies on an ASA to protect the device to maintain service when used as a multi tenant firewall. For example following several ...
-1
votes
1answer
123 views

New Fiber Installation Resulting in Slow Download Speeds [closed]

TWC 80Mbps Cisco ASA 5510 (MTU 1500) Download speeds on my Windows and Mac machines are ~200KB/sec. If I use a download manager that opens 20 concurrent connections I can hit the full 8MB/sec. I ...
1
vote
1answer
180 views

Cisco ASA: Terrible network speed once or twice a day, fine otherwise

I've been trying to get to the bottom of this for a while now and, well, it seems like I can't. We have two servers behind an ASA5505 (software version 8.3) at a datacenter. They run a wide variety of ...
0
votes
1answer
244 views

Cisco ASA failover can't ping gateway

I'm currently trying to set up a failover network for my Cisco ASA 55x0 using the SLA traking. I have the "outside" interface (network 89.x.x.48/29) and the "outside2" interface (network ...
0
votes
1answer
155 views

Secondary fallback/failover network on Cisco ASA

In my network there is a Cisco ASA 55x0 with "inside" interface (network 192.168.79.0/24) and "outside" interface (network 89.x.x.48/29) There is this nat rule: object network NAToutside nat ...
1
vote
0answers
745 views

ASA Slow IPSec Performance with Inconsistent Window Size

I have a IPSec link between two sites over ASA 5520s running 8.4(3) and I am getting extremely poor performance when traffic passes over the IPSec VPN. CPU on the devices is ~13%, Memory at 408 MB, ...
0
votes
1answer
295 views

Cisco ASA 5505 and slow download speeds for Apple devices [closed]

For traffic routing through my ASA 5505, downloads for all Apple devices, including AppleTV iPad gen 1 IMac MacBook Pro are very slow. speedof.me show less than 1 Mbps download (where I should ...
0
votes
3answers
497 views

Cisco ASA syslog over VPN tunnel

I am struggling to get my Cisco device to send syslog data to a remote server running behind a VPN tunnel. syslog IP 10.1.1.161 on the remote end. 10.23.2.0 is local subnet. SNMP polling from ...
2
votes
1answer
310 views

VPN Failover Cisco ASA 5505

So basically we have a Cisco ASA 5505 (we have inherited this from a customer, none of us have any experience with Cisco's). Now essentially we have to WAN lines which we have setup in Failover, via ...
0
votes
1answer
165 views

Cisco ASA: Why do I sometimes need a username/password when entering enable mode

I'm automating some interaction with Cisco ASA devices. I need to do the following: login over ssh send 'enable', provide enable password send 'configure terminal' send some other commands, never ...
0
votes
1answer
183 views

Route being ignored on core Cisco 6500 switch?

This is less likely a bug, and more likely a lack of my own understanding on routing. I am having an asymmetric routing issue where return traffic is going out the wrong firewall. I have an explicit ...
0
votes
1answer
154 views

How do you configure a Lan to Lan VPN on an ASA without using your outside interface IP address?

I have two /28 subnets A & B. My PIX and ASA's outside interface addresses are both in subnet A. I am in the middle of a migration from the PIX to the ASA and need to use the PIX outside ...
0
votes
2answers
955 views

Cisco ASA-5505 Port Forwarding

I have a Cisco ASA-5505 firewall, which is currently configured to share our internet connection and do NAT for my LAN, as well as forward port 443 to an internal machine. I need to forward port 2222 ...
1
vote
1answer
1k views

ASA 5510 8.4 Nat & Portforwarding

So I'm trying to forward an internal service on a internal server to the external interface on the same port on the outside interface of our ASA. I been searching for a solution for days and found ...
3
votes
2answers
1k views

NTP client on CentOS 5 fails behind Cisco ASA firewall

I have a CentOS server on which I want to set up an NTP client to get accurate time for the server. The server is on a local subnet with NAT behind an ASA 5505 firewall, which acts as NAT router, and ...
0
votes
1answer
51 views

LAN has two entry points - how to manage traffic

I asked this question yesterday when I (seemingly) couldn't get traffic across my router. I've spent a lot of time since then with packet capturing, the ASA 5505 cli/ASDM and wireshark. I've ...
7
votes
2answers
727 views

Routing via Cisco ASA is changing TCP sequence/ACK numbers

Our network has a dedicated VPN appliance that sits inside the office network. We have a Cisco ASA with a static route that routes the VPN subnets to the VPN appliance. So a typical request from the ...
4
votes
1answer
5k views

Strongswan vpn tunnel connected but the traffic is not routed through it

I have just set up a vpn tunnel site-to-site with strongswan (4.5). The tunnel looks fine and connected to the other side, but seems there is a problem routing traffic through the tunnel. Any idea? ...
1
vote
1answer
2k views

How can I debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM?

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious ...
1
vote
1answer
1k views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
0
votes
0answers
469 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
137 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
0
votes
0answers
89 views

ASA 5505 Dedicate WAN Route to Voice Vlan

I've Got multiple WAN connections currently and I plan on moving towards a Active/standby Configuration in the near future, I have two asa 5505's with SecPlus licenses, the device is currently ...
0
votes
2answers
505 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
6
votes
1answer
325 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
1
vote
3answers
200 views

Cisco ASA Route command

I'm trying to route connections that are going outbound from my private network to an external IP via another host that is on my internal network. Should the following work? For example: External ...
3
votes
2answers
6k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
1
vote
1answer
404 views

Broadcom NetXtreme II GigE Teaming Does Not Use Unique MAC, Causing Collisions

I currently have a new Dell server on my local (inside) network that I have setup to use three of the four nics to create a team. Examples below. NIC_1 - mac: 000000000001 - ip: n/a NIC_2 - mac: ...
0
votes
2answers
7k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
2answers
343 views

IP and Port Forwarding on ASA 5505

I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
0
votes
0answers
65 views

Multiple Ports Forwards, Most Working, but Not All?

So I have this ASA5505 setup and pretty much everything works, except a couple key port forwards. Can anybody spot ANY reason why SOME port forwarding would not work? Specifically I know the 50000 ...
0
votes
1answer
57 views

.jsp website not loading behind new Cisco ASA 5510

I have an internal web server hosting a few different websites. I'm switching from a Sonicwall NSA to a Cisco ASA appliance. When I switch over to the ASA all of my websites load for external hosts ...
0
votes
3answers
230 views

Cisco ASA active SwitchPort

Does anyone know how to see which switch ports are cabled from CLI or ASDM? I am configuring a 5505 and the inside has 6 interfaces associated, only one of which is actually actively linked. I can't ...
0
votes
4answers
2k views

Allowing inside traffic to outside on ASA 5505

We have an ASA 5505 with an inside interface 10.22.33.0/24 and outside x.x.x.x/26. The inside ip's are obviously private and the outside ip's are public. I've been able to set up a nat rule to route ...
0
votes
1answer
627 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...