The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

1
vote
3answers
958 views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
2answers
816 views

Cisco ASA Act as a Hardware Security Module?

We have a partner that is requiring us to get a HSM for a web application that we host for them. This is something new for us, we've always installed our SSL certificates on our web servers and never ...
0
votes
1answer
599 views

Clear Cisco ASA connection count

Here's what I'm doing to get a connection count on my ASA asa# show conn count 100 in use, 3389 most used asa# I want to reset the most used count. How do I do that?
0
votes
2answers
5k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
2answers
2k views

Cisco asa 5505 to use internal DNS server

I have just installed and configured a ASA 5505 firewall (basic license) which has 3 VLANs (outside, trusted, untrusted) and the configuration is really basic. Outside is for internet, trusted is ...
3
votes
0answers
3k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
0
votes
1answer
44 views

.jsp website not loading behind new Cisco ASA 5510

I have an internal web server hosting a few different websites. I'm switching from a Sonicwall NSA to a Cisco ASA appliance. When I switch over to the ASA all of my websites load for external hosts ...
0
votes
3answers
935 views

Allowing inside traffic to outside on ASA 5505

We have an ASA 5505 with an inside interface 10.22.33.0/24 and outside x.x.x.x/26. The inside ip's are obviously private and the outside ip's are public. I've been able to set up a nat rule to route ...
0
votes
0answers
52 views

Multiple Ports Forwards, Most Working, but Not All?

So I have this ASA5505 setup and pretty much everything works, except a couple key port forwards. Can anybody spot ANY reason why SOME port forwarding would not work? Specifically I know the 50000 ...
0
votes
3answers
183 views

Cisco ASA active SwitchPort

Does anyone know how to see which switch ports are cabled from CLI or ASDM? I am configuring a 5505 and the inside has 6 interfaces associated, only one of which is actually actively linked. I can't ...
0
votes
1answer
387 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
0answers
28 views

ASA 5505 base license and Voice vlan [duplicate]

My current setup contains a cisco asa 5505 with two cisco sf300-24p switches, the data and voice vlans have been setup on the switches and I've started to setup the needed vlans on the ASA, but it ...
0
votes
2answers
569 views

Cisco ASA: Routing packets based on where the connections started from

We have a Cisco ASA 5505 (version 8.2(2)) with three interfaces: outside: IP address 11.11.11.11, this is the default route inside: IP address 10.1.1.1, this is the local subnet newlink: 22.22.22.22, ...
1
vote
1answer
388 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
0
votes
1answer
97 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
309 views

pfSense and ASA 5505

I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
0
votes
1answer
168 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
0
votes
1answer
251 views

ASA 8.4 multiple ISP route on port?

ASA-5505, Security Plus license, ASA 8.4, two ISPs. I'd like to send www/https traffic from the inside network out on one ISP interface and everything else on the other. I'm not looking for using it ...
1
vote
2answers
128 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
0
votes
2answers
132 views

KVM Networking - Multiple LANs

I'm trying to set up some virtual servers with kvm and am struggling to work out what to do regards the network config. Currently I have 10 dedicated servers behind a firewall (asa 5505) - 2 of these ...
0
votes
1answer
509 views

Cisco ASA 5505 communication between VLANs

I have an ASA 5505 running 8.4 with multiple internal networks: inside: 10.1.0.0/16 mfg: 10.2.0.0/16 operator: 10.6.0.0/24 I want the inside and mfg networks to have full access to each other and ...
1
vote
1answer
1k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
2
votes
1answer
240 views

Can a Cisco ASA 5550 have multiple boot statements?

In my Cisco routers I have multiple boot statements in the event that one of the images fails to load or is accidently deleted. For example a router may have a config such as: boot system flash ...
1
vote
2answers
530 views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
1answer
158 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
0
votes
2answers
228 views

ASA 5505 outside access for clients with dynamically assigned IPs, no outside access for clients with static IPs

We have an ASA configured to access the internet, which works fine for clients who have an IP address assigned by DHCP, but not for clients with manually assigned IPs. For instance, with the DHCP ...
4
votes
4answers
2k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
0
votes
1answer
638 views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
0
votes
1answer
144 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
0
votes
1answer
474 views

Active and Passive FTP between two Cisco ASA 5505s

A client of mine has a IIS 7 FTP server in Active mode sitting behind a Cisco ASA 5505. This setup is known good, as external clients (once instructed on IE settings) are able to connect to the FTP ...
1
vote
0answers
272 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
0
votes
1answer
246 views

How to get a list of frequent VPN users from a Cisco ASA 5510?

The Cisco ASA 5510 here at work is being decommissioned and I want to find out what users used it alot. I didn't set this thing up myself, but it would be nice to add the same users to the new system ...
4
votes
3answers
5k views

Denying ICMP type 3 code 4 traffic - good or bad?

Investigating a slow VPN connection (Cisco ASA IPSec) to a remote office, I noticed on our firewall a lot of access rule matches: Denied ICMP type=3, code=4 from *ip_address* on interface outside I ...
-1
votes
1answer
542 views

FTP in DMZ, TCP Ports for LDAP Auth

szenario: (outside)---(ASA5510)---(inside) ->Windows2008 DC .....................(dmz) ..........->Win2008 FTP Server Which Ports do I need to open from DMZ->Inside that FTP Users can ...
0
votes
0answers
842 views

Cisco ASA 5505 - Inside hosts can't access outside

Just configuring a Cisco ASA 5505. I thought I had it set up correctly, but there is obviously something wrong. Hosts on the inside vlan cannot access anything outside. Inside hosts can ping and SSH ...
1
vote
1answer
289 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
0
votes
1answer
310 views

Single Cisco ASA, Replacing single 2960 switch with 2 x 2960G's and VLANS

I have a Cisco ASA5510, IOS 7.2.5 Presently it is connected to a single Cisco 2960 with VLAN's 10,11,12, configured as subinterfaces on E0/1, which are also the internal default gateways for the ...
2
votes
1answer
186 views

Allowing multiple IP addresses for a single VPN user

Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend. User authenticatin is based on the group password, user password ...
2
votes
1answer
2k views

Cisco ASA - Enable communication between same security level

I have recently inherited a network with a Cisco ASA (running version 8.2). I am trying to configure it to allow communication between two interfaces configured with the same security level ...
0
votes
1answer
795 views

ASA 5505 not allowing traffic to lower security interface

We have an ASA 5505 with a VLAN setup for each of outside, inside and two dmz interfaces. The outside interface is set to security level 0, inside set to 100, and both dmz interfaces set to 50. ...
0
votes
1answer
83 views

Cisco ASA Becomes Non-responsive

I have a client that has a Cisco ASA 5505 that sits between their router (provides VOIP phone service) and their Cisco 3550 (Very old version of IOS) that they use as a "Core" switch. This works well ...
2
votes
1answer
244 views

Disable external Java apps network-wide

According to US CERT TA13-010A, all computer users are advised to disable Java 1.7 in their browser due to arbitrary code execution risks from a zero-day Java vulnerability; however, we rely on ...
1
vote
1answer
353 views

Cisco ASA Redirect all traffic from specific outside hosts to specific inside host

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to ...
0
votes
1answer
713 views

PBXact Behind ASA 5505 nat udp range 10000-20000

I'm installing a new pbxact phone server onsite and I've ran into an issue using a 3rd party sip, I've got the acl's for the traffic created and the traffic is allowed, I'm assuming i need to create a ...
1
vote
2answers
325 views

ASA, 2 WAN connections

I need help about configuration firewall ASA 5505 connected to 02 wan connections interface Vlan1 nameif inside security-level 100 ip address 192.168.254.1 255.255.255.252 interface Vlan2 ...
0
votes
1answer
190 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
2
votes
1answer
350 views

Cisco ASA5505 8.2 Multiple Outside IP to Multiple Inside IP

Trying to setup ASA5505. Semi working but having issues with accessing services from the outside. ASA5505 Basic License, Version 8.2. (plus upgrade to unlimited inside hosts). Alert: I'm a Cisco ...
1
vote
2answers
787 views

Cisco PIX 8.0.4, static address mapping not working?

upgrading a working Pix running 5.3.1 to 8.0.4. The memory/IOS upgrade went fine, but the 8.0.4 configuration is not quite working 100%. The 5.3.1 config on which it was based is working fine. ...
1
vote
1answer
99 views

Cisco ASA 5500 - Internet connection dies when adding ICMP exception to firewall

When I add ICMP to be allowed both on inside / outside interfaces the internet connection dies. Does anyone know why this happens? I kind of observed that this behavior takes place not just for ICMP. ...
1
vote
1answer
263 views

Configure Cisco Pix 515 with DMZ and no NAT

I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations. I will be getting a new net for my department, which I am going to configure. At my hands, I ...