The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

3
votes
2answers
3k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
0
votes
0answers
69 views

Looking for Tutorial on establishing site to site VPN from a Cisco ASA 55XX to a Sonicwall NSA 4500 - with DHCP over VPN

We use an NSA 4500 for our central network edge. One of our sites shares an ASA 55XX (not sure of exact model yet) with a cohabitant and they would like to use it, if they can, to establish a VPN ...
1
vote
1answer
262 views

Broadcom NetXtreme II GigE Teaming Does Not Use Unique MAC, Causing Collisions

I currently have a new Dell server on my local (inside) network that I have setup to use three of the four nics to create a team. Examples below. NIC_1 - mac: 000000000001 - ip: n/a NIC_2 - mac: ...
0
votes
2answers
3k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
2answers
158 views

IP and Port Forwarding on ASA 5505

I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
0
votes
0answers
49 views

Multiple Ports Forwards, Most Working, but Not All?

So I have this ASA5505 setup and pretty much everything works, except a couple key port forwards. Can anybody spot ANY reason why SOME port forwarding would not work? Specifically I know the 50000 ...
0
votes
1answer
40 views

.jsp website not loading behind new Cisco ASA 5510

I have an internal web server hosting a few different websites. I'm switching from a Sonicwall NSA to a Cisco ASA appliance. When I switch over to the ASA all of my websites load for external hosts ...
0
votes
3answers
155 views

Cisco ASA active SwitchPort

Does anyone know how to see which switch ports are cabled from CLI or ASDM? I am configuring a 5505 and the inside has 6 interfaces associated, only one of which is actually actively linked. I can't ...
0
votes
3answers
589 views

Allowing inside traffic to outside on ASA 5505

We have an ASA 5505 with an inside interface 10.22.33.0/24 and outside x.x.x.x/26. The inside ip's are obviously private and the outside ip's are public. I've been able to set up a nat rule to route ...
0
votes
1answer
298 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
0answers
28 views

ASA 5505 base license and Voice vlan [duplicate]

My current setup contains a cisco asa 5505 with two cisco sf300-24p switches, the data and voice vlans have been setup on the switches and I've started to setup the needed vlans on the ASA, but it ...
0
votes
1answer
251 views

pfSense and ASA 5505

I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
0
votes
1answer
88 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
129 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
1
vote
1answer
266 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
0
votes
1answer
232 views

ASA 8.4 multiple ISP route on port?

ASA-5505, Security Plus license, ASA 8.4, two ISPs. I'd like to send www/https traffic from the inside network out on one ISP interface and everything else on the other. I'm not looking for using it ...
0
votes
2answers
118 views

KVM Networking - Multiple LANs

I'm trying to set up some virtual servers with kvm and am struggling to work out what to do regards the network config. Currently I have 10 dedicated servers behind a firewall (asa 5505) - 2 of these ...
0
votes
1answer
397 views

Cisco ASA 5505 communication between VLANs

I have an ASA 5505 running 8.4 with multiple internal networks: inside: 10.1.0.0/16 mfg: 10.2.0.0/16 operator: 10.6.0.0/24 I want the inside and mfg networks to have full access to each other and ...
1
vote
2answers
123 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
1
vote
1answer
1k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
2
votes
1answer
199 views

Can a Cisco ASA 5550 have multiple boot statements?

In my Cisco routers I have multiple boot statements in the event that one of the images fails to load or is accidently deleted. For example a router may have a config such as: boot system flash ...
1
vote
2answers
457 views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
1answer
139 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
0
votes
1answer
131 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
0
votes
1answer
450 views

Active and Passive FTP between two Cisco ASA 5505s

A client of mine has a IIS 7 FTP server in Active mode sitting behind a Cisco ASA 5505. This setup is known good, as external clients (once instructed on IE settings) are able to connect to the FTP ...
1
vote
0answers
238 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
0
votes
2answers
193 views

ASA 5505 outside access for clients with dynamically assigned IPs, no outside access for clients with static IPs

We have an ASA configured to access the internet, which works fine for clients who have an IP address assigned by DHCP, but not for clients with manually assigned IPs. For instance, with the DHCP ...
1
vote
1answer
906 views

Fail-over VPN with two ISPs and Cisco ASA 5500 Series

We have a couple of branch offices that need to connect to a main site. We plan to use Cisco ASAs 5515 to establish VPN connections. We would also like to have 2 ISPs at each location to make the ...
0
votes
1answer
218 views

How to get a list of frequent VPN users from a Cisco ASA 5510?

The Cisco ASA 5510 here at work is being decommissioned and I want to find out what users used it alot. I didn't set this thing up myself, but it would be nice to add the same users to the new system ...
0
votes
0answers
754 views

Cisco ASA 5505 - Inside hosts can't access outside

Just configuring a Cisco ASA 5505. I thought I had it set up correctly, but there is obviously something wrong. Hosts on the inside vlan cannot access anything outside. Inside hosts can ping and SSH ...
0
votes
1answer
269 views

Single Cisco ASA, Replacing single 2960 switch with 2 x 2960G's and VLANS

I have a Cisco ASA5510, IOS 7.2.5 Presently it is connected to a single Cisco 2960 with VLAN's 10,11,12, configured as subinterfaces on E0/1, which are also the internal default gateways for the ...
2
votes
1answer
160 views

Allowing multiple IP addresses for a single VPN user

Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend. User authenticatin is based on the group password, user password ...
0
votes
1answer
81 views

Cisco ASA Becomes Non-responsive

I have a client that has a Cisco ASA 5505 that sits between their router (provides VOIP phone service) and their Cisco 3550 (Very old version of IOS) that they use as a "Core" switch. This works well ...
0
votes
1answer
624 views

ASA 5505 not allowing traffic to lower security interface

We have an ASA 5505 with a VLAN setup for each of outside, inside and two dmz interfaces. The outside interface is set to security level 0, inside set to 100, and both dmz interfaces set to 50. ...
2
votes
1answer
226 views

Disable external Java apps network-wide

According to US CERT TA13-010A, all computer users are advised to disable Java 1.7 in their browser due to arbitrary code execution risks from a zero-day Java vulnerability; however, we rely on ...
0
votes
1answer
621 views

PBXact Behind ASA 5505 nat udp range 10000-20000

I'm installing a new pbxact phone server onsite and I've ran into an issue using a 3rd party sip, I've got the acl's for the traffic created and the traffic is allowed, I'm assuming i need to create a ...
4
votes
3answers
338 views

Opening Ports on a Cisco ASA 5505

I am trying to configure a new 5505 but I am having difficulties opening ports that allow traffic in from the outside. My setup is Comcast Business Modem (w/ single static IP) -> ASA (10.0.0.1) -> ...
1
vote
1answer
235 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
1
vote
1answer
328 views

Cisco ASA Redirect all traffic from specific outside hosts to specific inside host

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to ...
1
vote
2answers
254 views

ASA, 2 WAN connections

I need help about configuration firewall ASA 5505 connected to 02 wan connections interface Vlan1 nameif inside security-level 100 ip address 192.168.254.1 255.255.255.252 interface Vlan2 ...
1
vote
3answers
640 views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
1answer
149 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
2
votes
1answer
281 views

Cisco ASA5505 8.2 Multiple Outside IP to Multiple Inside IP

Trying to setup ASA5505. Semi working but having issues with accessing services from the outside. ASA5505 Basic License, Version 8.2. (plus upgrade to unlimited inside hosts). Alert: I'm a Cisco ...
1
vote
1answer
237 views

Configure Cisco Pix 515 with DMZ and no NAT

I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations. I will be getting a new net for my department, which I am going to configure. At my hands, I ...
1
vote
1answer
776 views

ASA5505 Novice. Setting up Outside/Inside/and DMZ as Guest Network

I need a little help in developing a config for our ASA5505. I'm an MCSA/MCITPAS but I don't have a lot of practical cisco experience. Here is what I need help with, we currently have a PIX as our ...
0
votes
1answer
470 views

Cisco ASA 5505 - InterVLAN NAT Exemptions Implementation not working

Short version is we cannot communicate between our subnets. We have a Cisco ASA 5505 we are using for our network router. We have a Netgear L2 switch behind that with 10 vlans. Each VLAN is on its ...
1
vote
1answer
154 views

Dual Cisco ASA 5505 passing RSTP in transparent mode

I'm looking at moving to colocation and one area being discussed is networking redundancy. I can get a dual feed from a two different datacentre switches configured with Rapid Spanning Tree Protocol ...
1
vote
1answer
533 views

Trouble setting up incoming VPN in Microsoft SBS 2008 through a Cisco ASA 5505 appliance

I have replaced an aging firewall (custom setup using Linux) with a Cisco ASA 5505 appliance for our network. It's a very simple setup with around 10 workstations and a single Small Business Server ...
0
votes
1answer
232 views

Cisco ASA 8.2 ACL For NAT

Sadly I have gone back in time to ASA 8.2(5)33 which I am not so familiar with. I have configured NAT between two interfaces but traffic isn't passing becasue I can't get the ACL to work; (The full ...
1
vote
1answer
94 views

Cisco ASA 5500 - Internet connection dies when adding ICMP exception to firewall

When I add ICMP to be allowed both on inside / outside interfaces the internet connection dies. Does anyone know why this happens? I kind of observed that this behavior takes place not just for ICMP. ...