The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (1)

-1
votes
1answer
609 views

ASA stops internet when connected to VPN - firmware 9.x

I'm having issues setting up Remote access VPN on Cisco ASA (firmware 9.1) i'm able to connect via the VPN and access all internal resources but i'm not able to access internet when connected to the ...
2
votes
0answers
184 views

How to allow vpn users to access only specific servers?

Currently we have an ASA with an IP pool to allow an outside contractor to remotely connect and access our network. What we would like to do is limit what they can get to once they are connected. I ...
1
vote
1answer
290 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
1
vote
1answer
2k views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
1
vote
2answers
484 views

Cisco router or ASA [closed]

Can you tell me what is the difference between having both a Cisco router and ASA appliance in a network and having only the ASA? I remember that my ISP had set a router in front of our network and ...
1
vote
1answer
146 views

How many IP addresses can I expect to block on a Cisco 5500-X Series firewall?

Considering a Cisco ASA (5500-X) firewall for our internet edge in front of our web cluster. At the moment, we use a Linux box with iptables. A log analysis system detects brute-force attacks on ...
0
votes
1answer
146 views

Cisco ASA Static NAT Rule Explanation

Here is a chunk of my configuration on my ASA: name <my_external_ip> www.testwebsite.com object-group service http_https tcp port-object eq www port-object eq https access-list ...
0
votes
1answer
96 views

IIS7 using old SSL for outside clients (LAN/VPN clients okay)

I have a Windows 2008 R2 terminal server. When accessed over the web (ex. https://ts.domain.com/RDWeb) I get a message that the SSL certificate has been revoked. It appears to be issuing an old SSL ...
0
votes
0answers
124 views

ASDM - ASA Issue

This is actually a two part question, if anyone has had experience with the issue and could help me out it would be greatly appreciated. Backstory: Using GNS3 with ASA 8.4(2) and ASDM 7.1(5). I've ...
2
votes
1answer
2k views

Strongswan VPN Established but no Packets Routed

I'm setting up a VPN using strongSwan between a Linux instance on an Amazon EC2 instance and a remote network via its Cisco concentrator. I need to route packets from the Linux instance itself a ...
3
votes
1answer
5k views

Can't access ASA website to download ASDM launcher

Hoping someone can give me a pointer on here. I recently took a new position and am currently trying to learn the new system. I'm having trouble getting to ASDM and have Googled plenty to no avail. ...
0
votes
1answer
7k views

Cisco ASA 5505 - NAT or Port Forward for SIP / VoIP ver 8.4

I just had an NEC PBX installed that lets me use SIP trunks for VoIP services, My gateway is a Cisco ASA 5505 running 8.4 and I only have one public/static IP Addresses. So far, my trunks are ...
2
votes
1answer
203 views

ASA High Availability failover link configuration

According to the Cisco ASA 5500 Series Configuration Guide, Cisco's preferred method of configuring your network for ASA High Availability is as such: They have two switches on External, two ...
0
votes
0answers
34 views

Find a VPN Name on a Cisco ASA box given a remote IP address

I have a Cisco ASA box with multiple site-to-site VPNs defined. Is there a way to automate finding the VPN name based on a given remote IP address?
2
votes
3answers
2k views

VLAN over VPN (ASA 5520)? if not any other options available?

Is it possible to extend the local VLANs to a Remote site connected by IPSEC VPN using ASA 5520 / Cisco 1841 DSL router. can we have many VPN tunnels between the ASAs? (from every VLAN one vpn ...
1
vote
2answers
2k views

Cisco ASA syslog format description [closed]

Where can I find Cisco ASA syslog format description? Log example: Dec 11 08:01:24 <IP> %ASA-6-302015: Built outbound UDP connection 447235 for outside:NTP_Server_2/<port> ...
-1
votes
1answer
146 views

IPsec VPN Server behind Cisco ASA (Transparent mode)

I've a Cisco ASA 5510 with transparent mode, and I'm going to setup a IPsec VPN(Openswan) in a internal linux server(with Public IP). This server has 2 NIC, 1 public IP, and 1 internal IP. I've ...
-1
votes
1answer
127 views

Cisco ASA 5505: Created a faulty NAT rule. Can't reach the ASA

I was trying to create a NAT rule to reach my internal web server from inside the LAN. Something must have gone wrong. Now when i try to reach the ASA through https://192.168.1.1 the response is from ...
1
vote
2answers
580 views

Cisco ASA 5505: Reach outside DNS address from inside

We use a Cisco ASA 5505 at our company. We have a dns A record (home.company.com) pointing to the external IP. In the ASA 5505 the http-port (80) is forwarded to an inside web server. No problem ...
4
votes
2answers
1k views

IPSec tunnel on ASA keeps disconnecting

I have an ASA IPSec tunnel configured between an ASA5505 and Microsoft TMG 2010 SP2. The tunnel sometimes works for a few hours, and then disconnects, and other times it works for 5 minutes and then ...
1
vote
0answers
1k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
2
votes
0answers
265 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
1
vote
1answer
73 views

Cisco ASA crypto keys, SSH, and VPN

I'm new to the ASA and wanted to know if regenerating crypto keys on an existing ASA with established VPN tunnels could negatively affect the tunnels. The reason for wanting to regenerate crypto keys ...
2
votes
1answer
294 views

Cisco ASA 5500 — List of outbound connections?

Is there a command or GUI option to get a list of outbound connections. Ideally, I'd like to know the internal IP address, the external IP address, and the remote port used. I don't need a lot of ...
2
votes
1answer
1k views

Dual ISP Inbound NAT — Asymmetric routing

routing question here. In a dual ISP scenario is there way to use both external IPs and nat them to a web server in a higher security level? The issue I am running into is on the return path for ...
0
votes
2answers
915 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
1answer
465 views

Enable Cisco ASA as an SSH Tunneling

I am trying to utilize my Cisco ASA as a SSH Tunnel. I've configured this before when using a Linux server as the SSH target, however I cannot seem to get it to work with the ASA. I have configured ...
0
votes
1answer
379 views

Setup IPsec VPN using ASA5505 behind Juniper SSG5

I have been assigned to establish a Internet IPsecVPN connection between two sites using Cisco ASA5505 A site currently has following setup.(Same setup is expected in another site) Internet----->ADSL ...
0
votes
0answers
159 views

Cisco ASA: backup ISP connected to ASA for ASA access alone

What I'd like to do: Connect an interface to a separate ISP and let home user's VPN into the LAN via that interface, while normal web browsing traffic goes out the outside IF. My initial ...
2
votes
1answer
132 views

Is this a common/bug on this PPPoE setting for Cisco ASA 5505?

We have to change the way the firewall setup due to we've changed the internet provider. The way we setup we have ADSL modem and we have to do a full bridge mode and the firewall configuration has to ...
0
votes
1answer
41 views

Seeing odd (to me) packets in a network capture

This morning I connected a system to our switch connected to our ISP handoff in order to do some wiresharking. I had yet to set up any port mirrors, and confirmed that there were none in place. ...
0
votes
0answers
230 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
1answer
99 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
1answer
675 views

Cisco ASA 5510 SNMP config-change

I´m trying to set snmp trap when cisco asa 5510 is changed. I´m using this line: snmp-server host DMZ ZZ.YY.XX.5 community * snmp-server enable traps entity config-change fru-insert fru-remove But ...
0
votes
1answer
341 views

Cisco ASA 5510 : VPN split tunnel Strange behaviour

I work with a Cisco ASA 5510. I have enabled remote VPN connection with radius Authentication to two different internals networks: 10.1.0.0/16 10.10.0.0/16 from mobile VPN pool 192.168.111.0/24. ...
1
vote
0answers
453 views

Cisco SPA504G phone CDP/LLDP issue

Good morning everyone, Just recently signed up for the site because I'm looking for some help with an issue that's been plaguing me for about a week now. I hope I'm posting in the right place. If ...
0
votes
1answer
84 views

Cannot access Cisco ASA-5505 ASDN

I just got my network up-and-running. I would like the ASDN for some of my minions to be able to make minor changes without the need to contact me. This said, I have tried to enable it, and access ...
0
votes
1answer
210 views

Source of RST packet on ASA 5510

In reference to previous posts such as Finding source of RST packet on ASA 5505 I am not seeing any answers about how to FIX the RST from being sent by ASA; I only see discussion of how to provide a ...
2
votes
0answers
477 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
1
vote
0answers
238 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
0
votes
1answer
196 views

Corrupt file copy Windows 2012 -> VPN -> Windows 2012

I've getting problems copying files from one Windows 2012 server to another via Cisco ASA5505 VPN. I've had a similar setup with Win2008 servers & never saw the problem (same ASA5505 this end) ...
0
votes
0answers
263 views

Can Telnet be used to test Direct Push is open “long enough”

I am getting the event below in the Eventlog regarding Direct Push for Activesync. If it matters we have a Cisco ASA and a Citrix Netscaler. Event 1040 MSExchange Activesync The average of ...
2
votes
0answers
89 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
1
vote
2answers
1k views

Using a Cisco ASA 5505 to forward PXE (WDS) Requests

I have a Cisco ASA 5505 that uses around 5 NICS for different networks. Currently I'm using my ASA to route traffic as it's the only Cisco device I have capable of the small amount of routing ...
0
votes
1answer
835 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
2
votes
1answer
249 views

Add IP range to Cisco ASA 5505

I need to allow traffic through TCP/1494 and TCP/2598 (inbound & outbound) to IP range 10.1.25.1 to 10.1.25.254 within a Cisco ASA 5505. Can someone please help me with this? Under Cisco ADSM ...
2
votes
0answers
773 views

ASA5505, 9.1, Static NAT Port Range Forwarding

ASA5505 Version 8.4+ (Using 9.1).. Adding port range for static nat. object network server_x host 123.123.123.123 access-list outside_in extended permit tcp any object server_x range 1000 2000 ...
0
votes
0answers
21 views

Making Cisco IPSEC IKE KEY public

I have some OSX users that connect to our Cisco ASA VPN using the built in OSX VPN client. To configure this client I have to provide the Cisco IKE key. I am wanting to know if this key is something I ...
1
vote
1answer
790 views

LACP : Cisco ASA 5515 & Switch ProCurve 2920

I've two ASAs 5515 connected in failover Active/Stand by (on Gi0/5) My two ASAs are connected to two Switch ProCurve 2920 to have HA if something happens. So I plug something like that (don't pay ...
0
votes
1answer
1k views

ASA 5510 Site to Site VPN works in one direction

I have setup a site to site VPN connection between two Cisco ASA 5510. One site (let's call it A) can see the private network of the other site (site B), but site B cannot see the private network of ...