The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

1
vote
1answer
2k views

How can I debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM?

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious ...
1
vote
1answer
2k views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
0
votes
0answers
536 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
149 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
0
votes
0answers
99 views

ASA 5505 Dedicate WAN Route to Voice Vlan

I've Got multiple WAN connections currently and I plan on moving towards a Active/standby Configuration in the near future, I have two asa 5505's with SecPlus licenses, the device is currently ...
0
votes
2answers
571 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
6
votes
1answer
359 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
1
vote
3answers
219 views

Cisco ASA Route command

I'm trying to route connections that are going outbound from my private network to an external IP via another host that is on my internal network. Should the following work? For example: External ...
3
votes
2answers
7k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
1
vote
1answer
434 views

Broadcom NetXtreme II GigE Teaming Does Not Use Unique MAC, Causing Collisions

I currently have a new Dell server on my local (inside) network that I have setup to use three of the four nics to create a team. Examples below. NIC_1 - mac: 000000000001 - ip: n/a NIC_2 - mac: ...
0
votes
2answers
8k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
2answers
368 views

IP and Port Forwarding on ASA 5505

I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
0
votes
0answers
65 views

Multiple Ports Forwards, Most Working, but Not All?

So I have this ASA5505 setup and pretty much everything works, except a couple key port forwards. Can anybody spot ANY reason why SOME port forwarding would not work? Specifically I know the 50000 ...
0
votes
1answer
61 views

.jsp website not loading behind new Cisco ASA 5510

I have an internal web server hosting a few different websites. I'm switching from a Sonicwall NSA to a Cisco ASA appliance. When I switch over to the ASA all of my websites load for external hosts ...
0
votes
3answers
267 views

Cisco ASA active SwitchPort

Does anyone know how to see which switch ports are cabled from CLI or ASDM? I am configuring a 5505 and the inside has 6 interfaces associated, only one of which is actually actively linked. I can't ...
0
votes
4answers
3k views

Allowing inside traffic to outside on ASA 5505

We have an ASA 5505 with an inside interface 10.22.33.0/24 and outside x.x.x.x/26. The inside ip's are obviously private and the outside ip's are public. I've been able to set up a nat rule to route ...
0
votes
1answer
778 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
0answers
36 views

ASA 5505 base license and Voice vlan [duplicate]

My current setup contains a cisco asa 5505 with two cisco sf300-24p switches, the data and voice vlans have been setup on the switches and I've started to setup the needed vlans on the ASA, but it ...
0
votes
1answer
477 views

pfSense and ASA 5505

I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
0
votes
1answer
109 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
375 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
1
vote
1answer
750 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
0
votes
1answer
317 views

ASA 8.4 multiple ISP route on port?

ASA-5505, Security Plus license, ASA 8.4, two ISPs. I'd like to send www/https traffic from the inside network out on one ISP interface and everything else on the other. I'm not looking for using it ...
0
votes
2answers
154 views

KVM Networking - Multiple LANs

I'm trying to set up some virtual servers with kvm and am struggling to work out what to do regards the network config. Currently I have 10 dedicated servers behind a firewall (asa 5505) - 2 of these ...
0
votes
1answer
867 views

Cisco ASA 5505 communication between VLANs

I have an ASA 5505 running 8.4 with multiple internal networks: inside: 10.1.0.0/16 mfg: 10.2.0.0/16 operator: 10.6.0.0/24 I want the inside and mfg networks to have full access to each other and ...
1
vote
2answers
157 views

Cisco and HP backups to Spiceworks TFTP occasionally creating .tmp files

We are backing up our ASAs and switches using some scripting. It works very well. I have noticed though, occasionally, the backups to the TFTP will come out not as plain "files" with no extension, ...
1
vote
1answer
2k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
2
votes
1answer
422 views

Can a Cisco ASA 5550 have multiple boot statements?

In my Cisco routers I have multiple boot statements in the event that one of the images fails to load or is accidently deleted. For example a router may have a config such as: boot system flash ...
1
vote
2answers
834 views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
1answer
257 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
0
votes
1answer
169 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
0
votes
1answer
754 views

Active and Passive FTP between two Cisco ASA 5505s

A client of mine has a IIS 7 FTP server in Active mode sitting behind a Cisco ASA 5505. This setup is known good, as external clients (once instructed on IE settings) are able to connect to the FTP ...
1
vote
0answers
334 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
0
votes
2answers
428 views

ASA 5505 outside access for clients with dynamically assigned IPs, no outside access for clients with static IPs

We have an ASA configured to access the internet, which works fine for clients who have an IP address assigned by DHCP, but not for clients with manually assigned IPs. For instance, with the DHCP ...
1
vote
1answer
2k views

Fail-over VPN with two ISPs and Cisco ASA 5500 Series

We have a couple of branch offices that need to connect to a main site. We plan to use Cisco ASAs 5515 to establish VPN connections. We would also like to have 2 ISPs at each location to make the ...
0
votes
1answer
376 views

How to get a list of frequent VPN users from a Cisco ASA 5510?

The Cisco ASA 5510 here at work is being decommissioned and I want to find out what users used it alot. I didn't set this thing up myself, but it would be nice to add the same users to the new system ...
0
votes
0answers
972 views

Cisco ASA 5505 - Inside hosts can't access outside

Just configuring a Cisco ASA 5505. I thought I had it set up correctly, but there is obviously something wrong. Hosts on the inside vlan cannot access anything outside. Inside hosts can ping and SSH ...
0
votes
1answer
397 views

Single Cisco ASA, Replacing single 2960 switch with 2 x 2960G's and VLANS

I have a Cisco ASA5510, IOS 7.2.5 Presently it is connected to a single Cisco 2960 with VLAN's 10,11,12, configured as subinterfaces on E0/1, which are also the internal default gateways for the ...
2
votes
1answer
262 views

Allowing multiple IP addresses for a single VPN user

Currently for one of the company I am using ASA 5505 as an VPN server with freeradius (mysql module) as an authentication backend. User authenticatin is based on the group password, user password ...
0
votes
1answer
88 views

Cisco ASA Becomes Non-responsive

I have a client that has a Cisco ASA 5505 that sits between their router (provides VOIP phone service) and their Cisco 3550 (Very old version of IOS) that they use as a "Core" switch. This works well ...
0
votes
1answer
1k views

ASA 5505 not allowing traffic to lower security interface

We have an ASA 5505 with a VLAN setup for each of outside, inside and two dmz interfaces. The outside interface is set to security level 0, inside set to 100, and both dmz interfaces set to 50. ...
2
votes
1answer
265 views

Disable external Java apps network-wide

According to US CERT TA13-010A, all computer users are advised to disable Java 1.7 in their browser due to arbitrary code execution risks from a zero-day Java vulnerability; however, we rely on ...
0
votes
2answers
961 views

PBXact Behind ASA 5505 nat udp range 10000-20000

I'm installing a new pbxact phone server onsite and I've ran into an issue using a 3rd party sip, I've got the acl's for the traffic created and the traffic is allowed, I'm assuming i need to create a ...
4
votes
3answers
522 views

Opening Ports on a Cisco ASA 5505

I am trying to configure a new 5505 but I am having difficulties opening ports that allow traffic in from the outside. My setup is Comcast Business Modem (w/ single static IP) -> ASA (10.0.0.1) -> ...
1
vote
1answer
430 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
1
vote
1answer
435 views

Cisco ASA Redirect all traffic from specific outside hosts to specific inside host

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to ...
1
vote
2answers
566 views

ASA, 2 WAN connections

I need help about configuration firewall ASA 5505 connected to 02 wan connections interface Vlan1 nameif inside security-level 100 ip address 192.168.254.1 255.255.255.252 interface Vlan2 ...
1
vote
3answers
2k views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
1answer
256 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
2
votes
1answer
477 views

Cisco ASA5505 8.2 Multiple Outside IP to Multiple Inside IP

Trying to setup ASA5505. Semi working but having issues with accessing services from the outside. ASA5505 Basic License, Version 8.2. (plus upgrade to unlimited inside hosts). Alert: I'm a Cisco ...