The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

1
vote
1answer
596 views

Is there a way to centraly manage multiple Cisco ASAs?

I work with many different clients that have multiple ASAs each. I was wondering if there was a way to centraly manage these ASAs?
4
votes
5answers
20k views

Monitoring Bandwidth Usage (Per Internal IP) - Cisco ASA 5505

I manage a small network with a Cisco ASA 5505 and a shared DSL connection. I would like to be able monitor the bandwidth usage of the various users/devices on my network (by IP). Can I do that ...
0
votes
1answer
50 views

LAN has two entry points - how to manage traffic

I asked this question yesterday when I (seemingly) couldn't get traffic across my router. I've spent a lot of time since then with packet capturing, the ASA 5505 cli/ASDM and wireshark. I've ...
2
votes
2answers
2k views

Monitoring IPSEC traffic on Cisco ASA

I have cacti monitoring a bunch of things on my Cisco ASA 5505s, but nothing to indicate the level of traffic flowing through VPN tunnels on them. Is this data available through SNMP on the ASA, and ...
4
votes
1answer
4k views

Strongswan vpn tunnel connected but the traffic is not routed through it

I have just set up a vpn tunnel site-to-site with strongswan (4.5). The tunnel looks fine and connected to the other side, but seems there is a problem routing traffic through the tunnel. Any idea? ...
1
vote
3answers
5k views

Exposing Exchange 2010 OWA via Cisco ASA 5520

Has anyone experience with exposing the web access (OWA) of an Exchange 2010 server through a Cisco ASA (my goal is to something like a DMZ)? If so could you give me some advice? I know that Exchange ...
1
vote
1answer
559 views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
1
vote
3answers
188 views

Cisco ASA Route command

I'm trying to route connections that are going outbound from my private network to an external IP via another host that is on my internal network. Should the following work? For example: External ...
0
votes
0answers
359 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
0
votes
2answers
418 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
0
votes
0answers
78 views

ASA 5505 Dedicate WAN Route to Voice Vlan

I've Got multiple WAN connections currently and I plan on moving towards a Active/standby Configuration in the near future, I have two asa 5505's with SecPlus licenses, the device is currently ...
6
votes
1answer
276 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
0
votes
2answers
278 views

IP and Port Forwarding on ASA 5505

I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
4
votes
1answer
431 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
1
vote
3answers
1k views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
2answers
837 views

Cisco ASA Act as a Hardware Security Module?

We have a partner that is requiring us to get a HSM for a web application that we host for them. This is something new for us, we've always installed our SSL certificates on our web servers and never ...
0
votes
1answer
635 views

Clear Cisco ASA connection count

Here's what I'm doing to get a connection count on my ASA asa# show conn count 100 in use, 3389 most used asa# I want to reset the most used count. How do I do that?
0
votes
2answers
6k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
1answer
2k views

Cisco asa 5505 to use internal DNS server

I have just installed and configured a ASA 5505 firewall (basic license) which has 3 VLANs (outside, trusted, untrusted) and the configuration is really basic. Outside is for internet, trusted is ...
3
votes
0answers
3k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
0
votes
1answer
48 views

.jsp website not loading behind new Cisco ASA 5510

I have an internal web server hosting a few different websites. I'm switching from a Sonicwall NSA to a Cisco ASA appliance. When I switch over to the ASA all of my websites load for external hosts ...
0
votes
3answers
1k views

Allowing inside traffic to outside on ASA 5505

We have an ASA 5505 with an inside interface 10.22.33.0/24 and outside x.x.x.x/26. The inside ip's are obviously private and the outside ip's are public. I've been able to set up a nat rule to route ...
0
votes
0answers
56 views

Multiple Ports Forwards, Most Working, but Not All?

So I have this ASA5505 setup and pretty much everything works, except a couple key port forwards. Can anybody spot ANY reason why SOME port forwarding would not work? Specifically I know the 50000 ...
0
votes
3answers
201 views

Cisco ASA active SwitchPort

Does anyone know how to see which switch ports are cabled from CLI or ASDM? I am configuring a 5505 and the inside has 6 interfaces associated, only one of which is actually actively linked. I can't ...
0
votes
1answer
463 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
0answers
29 views

ASA 5505 base license and Voice vlan [duplicate]

My current setup contains a cisco asa 5505 with two cisco sf300-24p switches, the data and voice vlans have been setup on the switches and I've started to setup the needed vlans on the ASA, but it ...
0
votes
2answers
583 views

Cisco ASA: Routing packets based on where the connections started from

We have a Cisco ASA 5505 (version 8.2(2)) with three interfaces: outside: IP address 11.11.11.11, this is the default route inside: IP address 10.1.1.1, this is the local subnet newlink: 22.22.22.22, ...
1
vote
1answer
475 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
0
votes
1answer
99 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
346 views

pfSense and ASA 5505

I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
0
votes
1answer
203 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
0
votes
1answer
262 views

ASA 8.4 multiple ISP route on port?

ASA-5505, Security Plus license, ASA 8.4, two ISPs. I'd like to send www/https traffic from the inside network out on one ISP interface and everything else on the other. I'm not looking for using it ...
1
vote
2answers
136 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
0
votes
2answers
139 views

KVM Networking - Multiple LANs

I'm trying to set up some virtual servers with kvm and am struggling to work out what to do regards the network config. Currently I have 10 dedicated servers behind a firewall (asa 5505) - 2 of these ...
0
votes
1answer
582 views

Cisco ASA 5505 communication between VLANs

I have an ASA 5505 running 8.4 with multiple internal networks: inside: 10.1.0.0/16 mfg: 10.2.0.0/16 operator: 10.6.0.0/24 I want the inside and mfg networks to have full access to each other and ...
1
vote
1answer
2k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
2
votes
1answer
262 views

Can a Cisco ASA 5550 have multiple boot statements?

In my Cisco routers I have multiple boot statements in the event that one of the images fails to load or is accidently deleted. For example a router may have a config such as: boot system flash ...
1
vote
2answers
614 views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
1answer
177 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
0
votes
2answers
250 views

ASA 5505 outside access for clients with dynamically assigned IPs, no outside access for clients with static IPs

We have an ASA configured to access the internet, which works fine for clients who have an IP address assigned by DHCP, but not for clients with manually assigned IPs. For instance, with the DHCP ...
4
votes
4answers
3k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
0
votes
1answer
694 views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
0
votes
1answer
149 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
0
votes
1answer
484 views

Active and Passive FTP between two Cisco ASA 5505s

A client of mine has a IIS 7 FTP server in Active mode sitting behind a Cisco ASA 5505. This setup is known good, as external clients (once instructed on IE settings) are able to connect to the FTP ...
1
vote
0answers
279 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
0
votes
1answer
263 views

How to get a list of frequent VPN users from a Cisco ASA 5510?

The Cisco ASA 5510 here at work is being decommissioned and I want to find out what users used it alot. I didn't set this thing up myself, but it would be nice to add the same users to the new system ...
4
votes
3answers
6k views

Denying ICMP type 3 code 4 traffic - good or bad?

Investigating a slow VPN connection (Cisco ASA IPSec) to a remote office, I noticed on our firewall a lot of access rule matches: Denied ICMP type=3, code=4 from *ip_address* on interface outside I ...
-1
votes
1answer
544 views

FTP in DMZ, TCP Ports for LDAP Auth

szenario: (outside)---(ASA5510)---(inside) ->Windows2008 DC .....................(dmz) ..........->Win2008 FTP Server Which Ports do I need to open from DMZ->Inside that FTP Users can ...
0
votes
0answers
882 views

Cisco ASA 5505 - Inside hosts can't access outside

Just configuring a Cisco ASA 5505. I thought I had it set up correctly, but there is obviously something wrong. Hosts on the inside vlan cannot access anything outside. Inside hosts can ping and SSH ...
1
vote
1answer
322 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...