The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

0
votes
0answers
116 views

Cisco ASA: backup ISP connected to ASA for ASA access alone

What I'd like to do: Connect an interface to a separate ISP and let home user's VPN into the LAN via that interface, while normal web browsing traffic goes out the outside IF. My initial ...
0
votes
1answer
341 views

Setup IPsec VPN using ASA5505 behind Juniper SSG5

I have been assigned to establish a Internet IPsecVPN connection between two sites using Cisco ASA5505 A site currently has following setup.(Same setup is expected in another site) Internet----->ADSL ...
2
votes
1answer
111 views

Is this a common/bug on this PPPoE setting for Cisco ASA 5505?

We have to change the way the firewall setup due to we've changed the internet provider. The way we setup we have ADSL modem and we have to do a full bridge mode and the firewall configuration has to ...
1
vote
4answers
7k views

CISCO ASA 5510: How to view the number of connections per second?

In my company we have a busy network (over +500 computers), all these computers before go the internet pass through our CISCO ASA 5510. How can I view the number of connections per second? At a ...
0
votes
1answer
40 views

Seeing odd (to me) packets in a network capture

This morning I connected a system to our switch connected to our ISP handoff in order to do some wiresharking. I had yet to set up any port mirrors, and confirmed that there were none in place. ...
0
votes
0answers
190 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
1answer
83 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
1answer
509 views

Cisco ASA 5510 SNMP config-change

I´m trying to set snmp trap when cisco asa 5510 is changed. I´m using this line: snmp-server host DMZ ZZ.YY.XX.5 community * snmp-server enable traps entity config-change fru-insert fru-remove But ...
0
votes
1answer
279 views

Cisco ASA 5510 : VPN split tunnel Strange behaviour

I work with a Cisco ASA 5510. I have enabled remote VPN connection with radius Authentication to two different internals networks: 10.1.0.0/16 10.10.0.0/16 from mobile VPN pool 192.168.111.0/24. ...
1
vote
0answers
300 views

Cisco SPA504G phone CDP/LLDP issue

Good morning everyone, Just recently signed up for the site because I'm looking for some help with an issue that's been plaguing me for about a week now. I hope I'm posting in the right place. If ...
0
votes
1answer
173 views

Corrupt file copy Windows 2012 -> VPN -> Windows 2012

I've getting problems copying files from one Windows 2012 server to another via Cisco ASA5505 VPN. I've had a similar setup with Win2008 servers & never saw the problem (same ASA5505 this end) ...
0
votes
1answer
81 views

Cannot access Cisco ASA-5505 ASDN

I just got my network up-and-running. I would like the ASDN for some of my minions to be able to make minor changes without the need to contact me. This said, I have tried to enable it, and access ...
3
votes
3answers
12k views

Cisco ASA logs “regular translation creation failed for icmp …” for DNS traffic, yet it works

Every few minutes our Cisco ASA 5505 firewall is logging errors that I can't figure out with my limited Cisco experience. Severity Date Time Syslog ID Source IP Destination IP ...
0
votes
1answer
168 views

Source of RST packet on ASA 5510

In reference to previous posts such as Finding source of RST packet on ASA 5505 I am not seeing any answers about how to FIX the RST from being sent by ASA; I only see discussion of how to provide a ...
0
votes
1answer
1k views

Will a Cisco ASA 5505 on a Gigabit Network slow my traffic?

I have a network consisting of a single server and a dozen workstations which connect through a Gigabit switch, I want to bring internet connectivity to the network so I got an ASA 5505 but didn't ...
2
votes
0answers
395 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
1
vote
0answers
198 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
4
votes
1answer
147 views

Protecting an ASA in a multi tenant environment

I'm interested to know what best practices are for setting limits and policies on an ASA to protect the device to maintain service when used as a multi tenant firewall. For example following several ...
0
votes
0answers
222 views

Can Telnet be used to test Direct Push is open “long enough”

I am getting the event below in the Eventlog regarding Direct Push for Activesync. If it matters we have a Cisco ASA and a Citrix Netscaler. Event 1040 MSExchange Activesync The average of ...
1
vote
2answers
923 views

Using a Cisco ASA 5505 to forward PXE (WDS) Requests

I have a Cisco ASA 5505 that uses around 5 NICS for different networks. Currently I'm using my ASA to route traffic as it's the only Cisco device I have capable of the small amount of routing ...
2
votes
1answer
184 views

Add IP range to Cisco ASA 5505

I need to allow traffic through TCP/1494 and TCP/2598 (inbound & outbound) to IP range 10.1.25.1 to 10.1.25.254 within a Cisco ASA 5505. Can someone please help me with this? Under Cisco ADSM ...
2
votes
0answers
625 views

ASA5505, 9.1, Static NAT Port Range Forwarding

ASA5505 Version 8.4+ (Using 9.1).. Adding port range for static nat. object network server_x host 123.123.123.123 access-list outside_in extended permit tcp any object server_x range 1000 2000 ...
0
votes
0answers
21 views

Making Cisco IPSEC IKE KEY public

I have some OSX users that connect to our Cisco ASA VPN using the built in OSX VPN client. To configure this client I have to provide the Cisco IKE key. I am wanting to know if this key is something I ...
4
votes
3answers
522 views

Opening Ports on a Cisco ASA 5505

I am trying to configure a new 5505 but I am having difficulties opening ports that allow traffic in from the outside. My setup is Comcast Business Modem (w/ single static IP) -> ASA (10.0.0.1) -> ...
1
vote
2answers
7k views

How do you change a Cisco ASA 5510 management interface?

I want to add a redundant interface to my Cisco ASA 5510. The management interface is currently using Ethernet0/1 (10.1.25.254/24) one of the interface I want to use for the redundant interfaces. So ...
10
votes
3answers
556 views

Cisco ASA and multiple VLANs

I currently manage 6 Cisco ASA devices (2 pairs of 5510s and 1 pair of 5550s). They all work quite nicely and are stable so this is more of a best-practice advice question rather then "OMG it's ...
-1
votes
1answer
149 views

New Fiber Installation Resulting in Slow Download Speeds [closed]

TWC 80Mbps Cisco ASA 5510 (MTU 1500) Download speeds on my Windows and Mac machines are ~200KB/sec. If I use a download manager that opens 20 concurrent connections I can hit the full 8MB/sec. I ...
1
vote
1answer
199 views

Cisco ASA: Terrible network speed once or twice a day, fine otherwise

I've been trying to get to the bottom of this for a while now and, well, it seems like I can't. We have two servers behind an ASA5505 (software version 8.3) at a datacenter. They run a wide variety of ...
0
votes
1answer
296 views

Cisco ASA failover can't ping gateway

I'm currently trying to set up a failover network for my Cisco ASA 55x0 using the SLA traking. I have the "outside" interface (network 89.x.x.48/29) and the "outside2" interface (network ...
0
votes
1answer
209 views

Secondary fallback/failover network on Cisco ASA

In my network there is a Cisco ASA 55x0 with "inside" interface (network 192.168.79.0/24) and "outside" interface (network 89.x.x.48/29) There is this nat rule: object network NAToutside nat ...
1
vote
1answer
434 views

Broadcom NetXtreme II GigE Teaming Does Not Use Unique MAC, Causing Collisions

I currently have a new Dell server on my local (inside) network that I have setup to use three of the four nics to create a team. Examples below. NIC_1 - mac: 000000000001 - ip: n/a NIC_2 - mac: ...
3
votes
1answer
7k views

Cisco ASA 5505 - L2TP over IPsec

I have followed this document on cisco site to set up the L2TP over IPsec connection. When I try to establish a VPN to ASA 5505 from my Windows XP, after I click on "connect" button, the "Connecting ...
2
votes
2answers
984 views

VPN Trunk Between Cisco ASA 5520 and DrayTek Vigor 2930

I'm a bit of a VPN newbie, so please go easy on me ... I'm trying to use the VPN trunking capabilities of the DrayTek Vigor 2930 firewall to bond two IPSec VPN connections to a Cisco ASA 5520 device ...
0
votes
1answer
312 views

Cisco ASA 5505 and slow download speeds for Apple devices [closed]

For traffic routing through my ASA 5505, downloads for all Apple devices, including AppleTV iPad gen 1 IMac MacBook Pro are very slow. speedof.me show less than 1 Mbps download (where I should ...
2
votes
3answers
3k views

VPN packet capture on ASA5505

Following up from a previous question regarding how to capture packets on the ASA5505 I'm having some difficulty in distinguishing which traffic has come through the VPN and which was generated from ...
2
votes
1answer
353 views

VPN Failover Cisco ASA 5505

So basically we have a Cisco ASA 5505 (we have inherited this from a customer, none of us have any experience with Cisco's). Now essentially we have to WAN lines which we have setup in Failover, via ...
0
votes
1answer
199 views

Cisco ASA: Why do I sometimes need a username/password when entering enable mode

I'm automating some interaction with Cisco ASA devices. I need to do the following: login over ssh send 'enable', provide enable password send 'configure terminal' send some other commands, never ...
0
votes
1answer
218 views

Route being ignored on core Cisco 6500 switch?

This is less likely a bug, and more likely a lack of my own understanding on routing. I am having an asymmetric routing issue where return traffic is going out the wrong firewall. I have an explicit ...
0
votes
1answer
166 views

How do you configure a Lan to Lan VPN on an ASA without using your outside interface IP address?

I have two /28 subnets A & B. My PIX and ASA's outside interface addresses are both in subnet A. I am in the middle of a migration from the PIX to the ASA and need to use the PIX outside ...
7
votes
2answers
810 views

Routing via Cisco ASA is changing TCP sequence/ACK numbers

Our network has a dedicated VPN appliance that sits inside the office network. We have a Cisco ASA with a static route that routes the VPN subnets to the VPN appliance. So a typical request from the ...
0
votes
2answers
1k views

Cisco ASA-5505 Port Forwarding

I have a Cisco ASA-5505 firewall, which is currently configured to share our internet connection and do NAT for my LAN, as well as forward port 443 to an internal machine. I need to forward port 2222 ...
1
vote
1answer
1k views

ASA 5510 8.4 Nat & Portforwarding

So I'm trying to forward an internal service on a internal server to the external interface on the same port on the outside interface of our ASA. I been searching for a solution for days and found ...
3
votes
2answers
1k views

NTP client on CentOS 5 fails behind Cisco ASA firewall

I have a CentOS server on which I want to set up an NTP client to get accurate time for the server. The server is on a local subnet with NAT behind an ASA 5505 firewall, which acts as NAT router, and ...
1
vote
1answer
683 views

Is there a way to centraly manage multiple Cisco ASAs?

I work with many different clients that have multiple ASAs each. I was wondering if there was a way to centraly manage these ASAs?
4
votes
5answers
22k views

Monitoring Bandwidth Usage (Per Internal IP) - Cisco ASA 5505

I manage a small network with a Cisco ASA 5505 and a shared DSL connection. I would like to be able monitor the bandwidth usage of the various users/devices on my network (by IP). Can I do that ...
0
votes
1answer
52 views

LAN has two entry points - how to manage traffic

I asked this question yesterday when I (seemingly) couldn't get traffic across my router. I've spent a lot of time since then with packet capturing, the ASA 5505 cli/ASDM and wireshark. I've ...
2
votes
2answers
3k views

Monitoring IPSEC traffic on Cisco ASA

I have cacti monitoring a bunch of things on my Cisco ASA 5505s, but nothing to indicate the level of traffic flowing through VPN tunnels on them. Is this data available through SNMP on the ASA, and ...
5
votes
1answer
6k views

Strongswan vpn tunnel connected but the traffic is not routed through it

I have just set up a vpn tunnel site-to-site with strongswan (4.5). The tunnel looks fine and connected to the other side, but seems there is a problem routing traffic through the tunnel. Any idea? ...
1
vote
3answers
6k views

Exposing Exchange 2010 OWA via Cisco ASA 5520

Has anyone experience with exposing the web access (OWA) of an Exchange 2010 server through a Cisco ASA (my goal is to something like a DMZ)? If so could you give me some advice? I know that Exchange ...
1
vote
1answer
2k views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...