The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

1
vote
1answer
291 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
1
vote
1answer
353 views

Cisco ASA Redirect all traffic from specific outside hosts to specific inside host

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to ...
1
vote
2answers
326 views

ASA, 2 WAN connections

I need help about configuration firewall ASA 5505 connected to 02 wan connections interface Vlan1 nameif inside security-level 100 ip address 192.168.254.1 255.255.255.252 interface Vlan2 ...
1
vote
3answers
974 views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
1answer
191 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
2
votes
1answer
351 views

Cisco ASA5505 8.2 Multiple Outside IP to Multiple Inside IP

Trying to setup ASA5505. Semi working but having issues with accessing services from the outside. ASA5505 Basic License, Version 8.2. (plus upgrade to unlimited inside hosts). Alert: I'm a Cisco ...
1
vote
1answer
263 views

Configure Cisco Pix 515 with DMZ and no NAT

I hope that someone could shed some light over my situation, as I am fairly new to PIX configurations. I will be getting a new net for my department, which I am going to configure. At my hands, I ...
1
vote
1answer
923 views

ASA5505 Novice. Setting up Outside/Inside/and DMZ as Guest Network

I need a little help in developing a config for our ASA5505. I'm an MCSA/MCITPAS but I don't have a lot of practical cisco experience. Here is what I need help with, we currently have a PIX as our ...
0
votes
1answer
525 views

Cisco ASA 5505 - InterVLAN NAT Exemptions Implementation not working

Short version is we cannot communicate between our subnets. We have a Cisco ASA 5505 we are using for our network router. We have a Netgear L2 switch behind that with 10 vlans. Each VLAN is on its ...
1
vote
1answer
159 views

Dual Cisco ASA 5505 passing RSTP in transparent mode

I'm looking at moving to colocation and one area being discussed is networking redundancy. I can get a dual feed from a two different datacentre switches configured with Rapid Spanning Tree Protocol ...
1
vote
1answer
581 views

Trouble setting up incoming VPN in Microsoft SBS 2008 through a Cisco ASA 5505 appliance

I have replaced an aging firewall (custom setup using Linux) with a Cisco ASA 5505 appliance for our network. It's a very simple setup with around 10 workstations and a single Small Business Server ...
0
votes
1answer
285 views

Cisco ASA 8.2 ACL For NAT

Sadly I have gone back in time to ASA 8.2(5)33 which I am not so familiar with. I have configured NAT between two interfaces but traffic isn't passing becasue I can't get the ACL to work; (The full ...
1
vote
1answer
99 views

Cisco ASA 5500 - Internet connection dies when adding ICMP exception to firewall

When I add ICMP to be allowed both on inside / outside interfaces the internet connection dies. Does anyone know why this happens? I kind of observed that this behavior takes place not just for ICMP. ...
2
votes
3answers
2k views

Using Cisco ASDM to change internal IP address of 5505

I'm trying to set up a new 5505 for the first time. I am not a network admin, so I'm using the graphical tool that comes with it, ASDM. One of the things I am trying to do is change the subnet used ...
0
votes
1answer
125 views

Cisco ASA 5505 in small office configuration

I have a small office network that currently consists of about 10 machines, a gigabit switch, and a router/firewall, in a fairly obvious configuration. I need to add a Cisco ASA 5505 to support a VPN ...
0
votes
1answer
1k views

Force failover a Cisco ASA

I have two ASA in a lan state primary\secondary configuration. None of them have "failover active" or "no failover active" in their configuration. Would it be proper to failover in a manner such as: ...
0
votes
1answer
249 views

ASA 5505 HTTPS block

Is it possible to block HTTPS websites with the ASA 5505? I have conflicting information.
0
votes
0answers
171 views

Trouble getting to a specific site through ASA

We are currently using a Cisco ASA 5510 with a CSC SSM module for our firewall. When trying to get to a certain site, we get a "503 Service Unavailable - Unable to connect to IP" error. If I connect ...
0
votes
1answer
243 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
2
votes
1answer
277 views

ASA 5505 VPN setup. VPN works but still unable to reach devices in the inside network.

I've setup a Remote Access VPN on my Cisco ASA 5505. I'm able to connect to my ASA via my phone or the Cisco client, but I'm unable to reach devices in my inside LAN when connected via VPN. The ...
0
votes
1answer
365 views

Cisco ASA 5510 VPN Dropping RDP Sessions

We have a Cisco ASA 5510 (47-7523-01 Rev A0) that we are using so that users can connect to the VPN from home. I use this connection myself to do late night backups on our old database systems that ...
1
vote
1answer
2k views

Cisco adaptive security appliance is dropping packets where SYN flag is not set

We have an apache instance sitting inside our DMZ which is configured to proxy requests to an internal NATed tomcat instance inside our network. It works fine, but then all of a sudden requests from ...
0
votes
0answers
266 views

Cannot enable shunning of IP scan attackers - error message on asa 5520

I've got the scanning threat detection turned on, in my Cisco ASA 5520, but someone turned off the option for "shun hosts detected by scanning threat". Now, when I try to enable it through the ASDM ...
0
votes
2answers
589 views

Exposing the AnyConnect HTTPS service to outside network

We have a Cisco ASA 5505 with firmware ASA9.0(1) and ASDM 7.0(2). It is configured with a public ip address, and when trying to reach it from the outside by HTTPS for AnyConnect VPN, we get the ...
0
votes
1answer
649 views

Cisco ASA - Unable to create “range” type of network object on 8.2

I'm wanting to block a range of ip addresses on my Cisco ASA 5520 (8.2) using ASDM 6.4. In the help files/cisco documentation, it says, just create a network object with a "range" type, and use that ...
3
votes
1answer
509 views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
1
vote
0answers
177 views

Can't remote into server from Android phone after VPN client connects to ASA 5505

I have a Samsung Galaxy Note. I am connecting to an ASA 5505 using NCP as the VPN Client. Connecting is no problem. However, when I try to remote into my server, using xtralogic remote desktop the ...
0
votes
1answer
127 views

ASA 5505 8.4 open ports for subnet

I have an ASA 5505 running 8.4 with its outside interface plugged into our internal network. I want to open up access to hosts on one of the vlans behind that ASA to hosts on our internal network. I ...
0
votes
1answer
351 views

Cisco ASA 5505: switchport VLAN assignment

Kind of a Cisco Luddite, but I'd like to assign physical switchports 0/1 and 0/2 to Vlan2 and physical switchports 0/3 and 0/4 to Vlan3. I'm assuming this is possible with base security license, ...
2
votes
0answers
323 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
0
votes
3answers
713 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
0
votes
2answers
263 views

Convert Cisco Router config to Cisco ASA config

I'm trying to migrate a large and complex ip extended access list from a Cisco 3725 router to a Cisco ASA5325-X firewall and I don't want to rewrite it so that it will work on the ASA. My question is ...
1
vote
0answers
395 views

Dual pppoe isp connection on a Cisco ASA 8.4

Thank you for helping me. I've a Cisco ASA 8.4 with dual isp connection (pppoe authentication on both line). I configure Two vdpn groups for each connection and add two vpdn username to my cisco's ...
1
vote
2answers
300 views

Cut over ASA global PAT address without connection drops

We're currently PATing everything from a particular subnet to the IP of an outside interface using our ASA5585 (dynamic PAT). We're experiencing pool exhaustion and therefore need to expand the global ...
0
votes
1answer
1k views

Cisco SSL VPN authenticating aginast AD via LDAP

I have an ASA 5520 and am trying to set up a remote access SSL VPN authenticating against AD using LDAP. Between these two guides: ...
-1
votes
2answers
298 views

Cisco ASA - Restrict IP for WebVPN access

I've got a Cisco ASA5510 with Firmware Version 8.0(5). I'd like to restrict the source IPs that are allowed to access the Router through WebVPN (port 443). Here is the relevant part of the config. ...
0
votes
0answers
118 views

Cisco ASA VPN Authentication

we're providing VPN Services to our Users through the Cisco ASA 5500 Series. As of now , the users can access VPN from any Client Machine. I want to allow VPN Access only to machines with particular ...
0
votes
1answer
1k views

Will a Cisco ASA 5505 on a Gigabit Network slow my traffic?

I have a network consisting of a single server and a dozen workstations which connect through a Gigabit switch, I want to bring internet connectivity to the network so I got an ASA 5505 but didn't ...
1
vote
0answers
116 views

Disable response from outside interface on ASA 5505 while allowing ping (and response from outside) on the inside interface?

On the ASA 5505 How do I allow icmp requests out (and responses back in) while not allowing a response from the outside interface when pinged.
1
vote
1answer
317 views

Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side

We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
1
vote
1answer
378 views

Monitoring ASA packet loss via SNMP

I want to monitor packet loss on my ASA 5505 VPN endpoints using SNMP. This is so I can graph the rates in Cacti and/or get alerts in Nagios. However, I am not sure what SNMP values I should use to ...
1
vote
0answers
65 views

What kind of time commitment is learning to use a Cisco router? [closed]

Background: I'm a development lead at a small software house. (~30 employees) Our IT guy recently retired, and our CEO, who is non-technical, can't be convinced to replace him. His reasoning is ...
0
votes
1answer
859 views

Cisco ASA 5540_outside to inside traffic NAT

This is for a test lab setup: landing server(192.168.49.26)---(.49.25/29)Cisco6500(.49.1/29)---(49.2)Cisco ASA(x.x.55.81)---External The C6500 is the core of the test lab to which the "landing ...
4
votes
1answer
522 views

Cisco ASA ipsec IKEv1 remote access for Avaya VPN phone - no client address assigned

I'm having a strange issue with remote access VPN connectivity on our ASA cluster. Normal site-to-site tunnels and AnyConnect connections works just fine. However, a special ipsec ikev1 tunnel does ...
0
votes
1answer
127 views

Share internet connection among 2 separate interfaces on an ASA

I am using a Cisco ASA 5505, and my license only permits 2 interfaces, so I have just added a vlan instead. I want to keep this vlan away from the inside network. I believe it's something to do with ...
2
votes
1answer
368 views

Cisco ASA dropping IPsec VPN between istself and CentOS server

Currently we're trying to set up an IPsec VPN between a Cisco ASA Version 8.0(4) and a CentOS Linux server. The tunnel comes up successfully, but for some reason that we can't figure out, the ...
4
votes
3answers
761 views

Can our firewall detect traffic sniffing inside the network?

We use Cisco ASA's firewall and NAT functions in our network (200 computers). Is there any possibility to configure Cisco ASA to detect traffic sniffering (for example wireshark) and network ...
3
votes
4answers
9k views

ASA 5505 Unable to launch device manager

I've seen similar errors posted but I think mine is a little different. I'm new to Cisco, and was given an ASA 5505 to configure. I intended to do a factory reset, but ended up running an erase, ...
4
votes
1answer
6k views

Configure the management interface on a Cisco ASA to allow access from an existing management LAN

(Redefined the question to match actual LAN topology...) I have a new Cisco ASA-5512-X firewall, which is going into an existing network stack to separate some specific client servers from the rest ...
0
votes
2answers
2k views

Ping Cisco ASA over VPN

ASA1 is 8.4(2) @ 192.168.1.1, behind this is host1 @ 192.168.1.10 ASA2 is 8.4(3) @ 192.168.2.1, behind this is host2 @ 192.168.2.10 Pinging form host1 to host2 works, but I can't ping that inside ...