The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (1)

0
votes
1answer
433 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
0
votes
2answers
5k views

Cisco ASA: Multiple static IPs on a single interface

I have a cisco ASA 5505 (ver 8.0.4) that currently has one IP address on the outside interface, 10.1.1.1. This is used for all communication with the outside world. I want to add a second IP to this ...
-1
votes
1answer
614 views

ASA stops internet when connected to VPN - firmware 9.x

I'm having issues setting up Remote access VPN on Cisco ASA (firmware 9.1) i'm able to connect via the VPN and access all internal resources but i'm not able to access internet when connected to the ...
3
votes
2answers
9k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
1
vote
1answer
299 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
2
votes
0answers
190 views

How to allow vpn users to access only specific servers?

Currently we have an ASA with an IP pool to allow an outside contractor to remotely connect and access our network. What we would like to do is limit what they can get to once they are connected. I ...
0
votes
1answer
849 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
1
vote
1answer
2k views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
1
vote
2answers
498 views

Cisco router or ASA [closed]

Can you tell me what is the difference between having both a Cisco router and ASA appliance in a network and having only the ASA? I remember that my ISP had set a router in front of our network and ...
0
votes
1answer
148 views

Cisco ASA Static NAT Rule Explanation

Here is a chunk of my configuration on my ASA: name <my_external_ip> www.testwebsite.com object-group service http_https tcp port-object eq www port-object eq https access-list ...
1
vote
1answer
151 views

How many IP addresses can I expect to block on a Cisco 5500-X Series firewall?

Considering a Cisco ASA (5500-X) firewall for our internet edge in front of our web cluster. At the moment, we use a Linux box with iptables. A log analysis system detects brute-force attacks on ...
0
votes
1answer
96 views

IIS7 using old SSL for outside clients (LAN/VPN clients okay)

I have a Windows 2008 R2 terminal server. When accessed over the web (ex. https://ts.domain.com/RDWeb) I get a message that the SSL certificate has been revoked. It appears to be issuing an old SSL ...
0
votes
0answers
126 views

ASDM - ASA Issue

This is actually a two part question, if anyone has had experience with the issue and could help me out it would be greatly appreciated. Backstory: Using GNS3 with ASA 8.4(2) and ASDM 7.1(5). I've ...
0
votes
1answer
7k views

Cisco ASA 5505 - NAT or Port Forward for SIP / VoIP ver 8.4

I just had an NEC PBX installed that lets me use SIP trunks for VoIP services, My gateway is a Cisco ASA 5505 running 8.4 and I only have one public/static IP Addresses. So far, my trunks are ...
4
votes
2answers
1k views

IPSec tunnel on ASA keeps disconnecting

I have an ASA IPSec tunnel configured between an ASA5505 and Microsoft TMG 2010 SP2. The tunnel sometimes works for a few hours, and then disconnects, and other times it works for 5 minutes and then ...
2
votes
1answer
203 views

ASA High Availability failover link configuration

According to the Cisco ASA 5500 Series Configuration Guide, Cisco's preferred method of configuring your network for ASA High Availability is as such: They have two switches on External, two ...
2
votes
1answer
353 views

ASA 5505 VPN setup. VPN works but still unable to reach devices in the inside network.

I've setup a Remote Access VPN on my Cisco ASA 5505. I'm able to connect to my ASA via my phone or the Cisco client, but I'm unable to reach devices in my inside LAN when connected via VPN. The ...
0
votes
0answers
34 views

Find a VPN Name on a Cisco ASA box given a remote IP address

I have a Cisco ASA box with multiple site-to-site VPNs defined. Is there a way to automate finding the VPN name based on a given remote IP address?
2
votes
3answers
2k views

VLAN over VPN (ASA 5520)? if not any other options available?

Is it possible to extend the local VLANs to a Remote site connected by IPSEC VPN using ASA 5520 / Cisco 1841 DSL router. can we have many VPN tunnels between the ASAs? (from every VLAN one vpn ...
1
vote
2answers
2k views

Cisco ASA syslog format description [closed]

Where can I find Cisco ASA syslog format description? Log example: Dec 11 08:01:24 <IP> %ASA-6-302015: Built outbound UDP connection 447235 for outside:NTP_Server_2/<port> ...
-1
votes
1answer
148 views

IPsec VPN Server behind Cisco ASA (Transparent mode)

I've a Cisco ASA 5510 with transparent mode, and I'm going to setup a IPsec VPN(Openswan) in a internal linux server(with Public IP). This server has 2 NIC, 1 public IP, and 1 internal IP. I've ...
3
votes
0answers
182 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
-1
votes
1answer
131 views

Cisco ASA 5505: Created a faulty NAT rule. Can't reach the ASA

I was trying to create a NAT rule to reach my internal web server from inside the LAN. Something must have gone wrong. Now when i try to reach the ASA through https://192.168.1.1 the response is from ...
1
vote
0answers
1k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
2
votes
0answers
267 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
2
votes
1answer
1k views

Dual ISP Inbound NAT — Asymmetric routing

routing question here. In a dual ISP scenario is there way to use both external IPs and nat them to a web server in a higher security level? The issue I am running into is on the return path for ...
1
vote
1answer
74 views

Cisco ASA crypto keys, SSH, and VPN

I'm new to the ASA and wanted to know if regenerating crypto keys on an existing ASA with established VPN tunnels could negatively affect the tunnels. The reason for wanting to regenerate crypto keys ...
1
vote
3answers
8k views

What does the Cisco ASA command “management-access” do?

I'm working with a Cisco ASA 5510. I changed the management interface to a different interface. I used the command "management-access" to get the new interface working, but the old interface ...
8
votes
3answers
17k views

How do I reach my internal server on the external IP?

We are trying to configure our Cisco 5505, and it has been done through ASDM. There is one big problem that we're not able to solve, and that's when you go from inside to outside and back in again. ...
0
votes
2answers
927 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
1answer
471 views

Enable Cisco ASA as an SSH Tunneling

I am trying to utilize my Cisco ASA as a SSH Tunnel. I've configured this before when using a Linux server as the SSH target, however I cannot seem to get it to work with the ASA. I have configured ...
0
votes
1answer
358 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
1
vote
1answer
795 views

LACP : Cisco ASA 5515 & Switch ProCurve 2920

I've two ASAs 5515 connected in failover Active/Stand by (on Gi0/5) My two ASAs are connected to two Switch ProCurve 2920 to have HA if something happens. So I plug something like that (don't pay ...
0
votes
0answers
162 views

Cisco ASA: backup ISP connected to ASA for ASA access alone

What I'd like to do: Connect an interface to a separate ISP and let home user's VPN into the LAN via that interface, while normal web browsing traffic goes out the outside IF. My initial ...
0
votes
1answer
382 views

Setup IPsec VPN using ASA5505 behind Juniper SSG5

I have been assigned to establish a Internet IPsecVPN connection between two sites using Cisco ASA5505 A site currently has following setup.(Same setup is expected in another site) Internet----->ADSL ...
2
votes
1answer
133 views

Is this a common/bug on this PPPoE setting for Cisco ASA 5505?

We have to change the way the firewall setup due to we've changed the internet provider. The way we setup we have ADSL modem and we have to do a full bridge mode and the firewall configuration has to ...
1
vote
4answers
9k views

CISCO ASA 5510: How to view the number of connections per second?

In my company we have a busy network (over +500 computers), all these computers before go the internet pass through our CISCO ASA 5510. How can I view the number of connections per second? At a ...
0
votes
1answer
41 views

Seeing odd (to me) packets in a network capture

This morning I connected a system to our switch connected to our ISP handoff in order to do some wiresharking. I had yet to set up any port mirrors, and confirmed that there were none in place. ...
0
votes
0answers
232 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
1answer
99 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
1answer
690 views

Cisco ASA 5510 SNMP config-change

I´m trying to set snmp trap when cisco asa 5510 is changed. I´m using this line: snmp-server host DMZ ZZ.YY.XX.5 community * snmp-server enable traps entity config-change fru-insert fru-remove But ...
0
votes
1answer
344 views

Cisco ASA 5510 : VPN split tunnel Strange behaviour

I work with a Cisco ASA 5510. I have enabled remote VPN connection with radius Authentication to two different internals networks: 10.1.0.0/16 10.10.0.0/16 from mobile VPN pool 192.168.111.0/24. ...
1
vote
0answers
466 views

Cisco SPA504G phone CDP/LLDP issue

Good morning everyone, Just recently signed up for the site because I'm looking for some help with an issue that's been plaguing me for about a week now. I hope I'm posting in the right place. If ...
0
votes
1answer
201 views

Corrupt file copy Windows 2012 -> VPN -> Windows 2012

I've getting problems copying files from one Windows 2012 server to another via Cisco ASA5505 VPN. I've had a similar setup with Win2008 servers & never saw the problem (same ASA5505 this end) ...
0
votes
1answer
84 views

Cannot access Cisco ASA-5505 ASDN

I just got my network up-and-running. I would like the ASDN for some of my minions to be able to make minor changes without the need to contact me. This said, I have tried to enable it, and access ...
3
votes
3answers
13k views

Cisco ASA logs “regular translation creation failed for icmp …” for DNS traffic, yet it works

Every few minutes our Cisco ASA 5505 firewall is logging errors that I can't figure out with my limited Cisco experience. Severity Date Time Syslog ID Source IP Destination IP ...
0
votes
1answer
212 views

Source of RST packet on ASA 5510

In reference to previous posts such as Finding source of RST packet on ASA 5505 I am not seeing any answers about how to FIX the RST from being sent by ASA; I only see discussion of how to provide a ...
0
votes
1answer
2k views

Will a Cisco ASA 5505 on a Gigabit Network slow my traffic?

I have a network consisting of a single server and a dozen workstations which connect through a Gigabit switch, I want to bring internet connectivity to the network so I got an ASA 5505 but didn't ...
2
votes
0answers
481 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
1
vote
0answers
239 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...