The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

0
votes
1answer
323 views

ASA 5505 HTTPS block

Is it possible to block HTTPS websites with the ASA 5505? I have conflicting information.
0
votes
0answers
187 views

Trouble getting to a specific site through ASA

We are currently using a Cisco ASA 5510 with a CSC SSM module for our firewall. When trying to get to a certain site, we get a "503 Service Unavailable - Unable to connect to IP" error. If I connect ...
0
votes
1answer
293 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
2
votes
1answer
305 views

ASA 5505 VPN setup. VPN works but still unable to reach devices in the inside network.

I've setup a Remote Access VPN on my Cisco ASA 5505. I'm able to connect to my ASA via my phone or the Cisco client, but I'm unable to reach devices in my inside LAN when connected via VPN. The ...
0
votes
1answer
488 views

Cisco ASA 5510 VPN Dropping RDP Sessions

We have a Cisco ASA 5510 (47-7523-01 Rev A0) that we are using so that users can connect to the VPN from home. I use this connection myself to do late night backups on our old database systems that ...
1
vote
1answer
2k views

Cisco adaptive security appliance is dropping packets where SYN flag is not set

We have an apache instance sitting inside our DMZ which is configured to proxy requests to an internal NATed tomcat instance inside our network. It works fine, but then all of a sudden requests from ...
-1
votes
0answers
336 views

Cannot enable shunning of IP scan attackers - error message on asa 5520

I've got the scanning threat detection turned on, in my Cisco ASA 5520, but someone turned off the option for "shun hosts detected by scanning threat". Now, when I try to enable it through the ASDM ...
0
votes
2answers
721 views

Exposing the AnyConnect HTTPS service to outside network

We have a Cisco ASA 5505 with firmware ASA9.0(1) and ASDM 7.0(2). It is configured with a public ip address, and when trying to reach it from the outside by HTTPS for AnyConnect VPN, we get the ...
0
votes
1answer
899 views

Cisco ASA - Unable to create “range” type of network object on 8.2

I'm wanting to block a range of ip addresses on my Cisco ASA 5520 (8.2) using ASDM 6.4. In the help files/cisco documentation, it says, just create a network object with a "range" type, and use that ...
3
votes
1answer
619 views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
1
vote
0answers
200 views

Can't remote into server from Android phone after VPN client connects to ASA 5505

I have a Samsung Galaxy Note. I am connecting to an ASA 5505 using NCP as the VPN Client. Connecting is no problem. However, when I try to remote into my server, using xtralogic remote desktop the ...
0
votes
1answer
139 views

ASA 5505 8.4 open ports for subnet

I have an ASA 5505 running 8.4 with its outside interface plugged into our internal network. I want to open up access to hosts on one of the vlans behind that ASA to hosts on our internal network. I ...
0
votes
1answer
427 views

Cisco ASA 5505: switchport VLAN assignment

Kind of a Cisco Luddite, but I'd like to assign physical switchports 0/1 and 0/2 to Vlan2 and physical switchports 0/3 and 0/4 to Vlan3. I'm assuming this is possible with base security license, ...
2
votes
0answers
375 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
0
votes
3answers
1k views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
0
votes
2answers
359 views

Convert Cisco Router config to Cisco ASA config

I'm trying to migrate a large and complex ip extended access list from a Cisco 3725 router to a Cisco ASA5325-X firewall and I don't want to rewrite it so that it will work on the ASA. My question is ...
1
vote
0answers
477 views

Dual pppoe isp connection on a Cisco ASA 8.4

Thank you for helping me. I've a Cisco ASA 8.4 with dual isp connection (pppoe authentication on both line). I configure Two vdpn groups for each connection and add two vpdn username to my cisco's ...
1
vote
2answers
369 views

Cut over ASA global PAT address without connection drops

We're currently PATing everything from a particular subnet to the IP of an outside interface using our ASA5585 (dynamic PAT). We're experiencing pool exhaustion and therefore need to expand the global ...
0
votes
1answer
1k views

Cisco SSL VPN authenticating aginast AD via LDAP

I have an ASA 5520 and am trying to set up a remote access SSL VPN authenticating against AD using LDAP. Between these two guides: ...
-1
votes
2answers
410 views

Cisco ASA - Restrict IP for WebVPN access

I've got a Cisco ASA5510 with Firmware Version 8.0(5). I'd like to restrict the source IPs that are allowed to access the Router through WebVPN (port 443). Here is the relevant part of the config. ...
0
votes
1answer
1k views

Will a Cisco ASA 5505 on a Gigabit Network slow my traffic?

I have a network consisting of a single server and a dozen workstations which connect through a Gigabit switch, I want to bring internet connectivity to the network so I got an ASA 5505 but didn't ...
1
vote
0answers
125 views

Disable response from outside interface on ASA 5505 while allowing ping (and response from outside) on the inside interface?

On the ASA 5505 How do I allow icmp requests out (and responses back in) while not allowing a response from the outside interface when pinged.
1
vote
1answer
399 views

Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side

We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
1
vote
1answer
454 views

Monitoring ASA packet loss via SNMP

I want to monitor packet loss on my ASA 5505 VPN endpoints using SNMP. This is so I can graph the rates in Cacti and/or get alerts in Nagios. However, I am not sure what SNMP values I should use to ...
0
votes
1answer
1k views

Cisco ASA 5540_outside to inside traffic NAT

This is for a test lab setup: landing server(192.168.49.26)---(.49.25/29)Cisco6500(.49.1/29)---(49.2)Cisco ASA(x.x.55.81)---External The C6500 is the core of the test lab to which the "landing ...
4
votes
1answer
631 views

Cisco ASA ipsec IKEv1 remote access for Avaya VPN phone - no client address assigned

I'm having a strange issue with remote access VPN connectivity on our ASA cluster. Normal site-to-site tunnels and AnyConnect connections works just fine. However, a special ipsec ikev1 tunnel does ...
0
votes
1answer
134 views

Share internet connection among 2 separate interfaces on an ASA

I am using a Cisco ASA 5505, and my license only permits 2 interfaces, so I have just added a vlan instead. I want to keep this vlan away from the inside network. I believe it's something to do with ...
2
votes
1answer
411 views

Cisco ASA dropping IPsec VPN between istself and CentOS server

Currently we're trying to set up an IPsec VPN between a Cisco ASA Version 8.0(4) and a CentOS Linux server. The tunnel comes up successfully, but for some reason that we can't figure out, the ...
4
votes
3answers
874 views

Can our firewall detect traffic sniffing inside the network?

We use Cisco ASA's firewall and NAT functions in our network (200 computers). Is there any possibility to configure Cisco ASA to detect traffic sniffering (for example wireshark) and network ...
3
votes
4answers
11k views

ASA 5505 Unable to launch device manager

I've seen similar errors posted but I think mine is a little different. I'm new to Cisco, and was given an ASA 5505 to configure. I intended to do a factory reset, but ended up running an erase, ...
4
votes
1answer
9k views

Configure the management interface on a Cisco ASA to allow access from an existing management LAN

(Redefined the question to match actual LAN topology...) I have a new Cisco ASA-5512-X firewall, which is going into an existing network stack to separate some specific client servers from the rest ...
0
votes
2answers
2k views

Ping Cisco ASA over VPN

ASA1 is 8.4(2) @ 192.168.1.1, behind this is host1 @ 192.168.1.10 ASA2 is 8.4(3) @ 192.168.2.1, behind this is host2 @ 192.168.2.10 Pinging form host1 to host2 works, but I can't ping that inside ...
0
votes
3answers
450 views

One device for routing/firewall/ISP balancing/gateway

Here are my three choices: Right now I have a cisco ASA that I'm using for a firewall, vlan router, gateway, and ISP failover. There isn't enough control in the ASA for what I need and the license ...
1
vote
2answers
1k views

ASA 5540 Enable Password Issue

I have a Cisco ASA 5540 running the following Software/Manager version: Cisco Adaptive Security Appliance Software Version 8.2(2)17 Device Manager Version 6.3(2) I use ASDM to make changes to the ...
3
votes
1answer
205 views

Can I enable NAT on a Cisco ASA without breaking connectivity?

Sorry for the noob question, I haven't done this in years... I have a Cisco ASA with a working VPN, which I set up like five years ago, and I would like to forward http through to an internal IP ...
10
votes
3answers
550 views

Cisco ASA and multiple VLANs

I currently manage 6 Cisco ASA devices (2 pairs of 5510s and 1 pair of 5550s). They all work quite nicely and are stable so this is more of a best-practice advice question rather then "OMG it's ...
2
votes
2answers
4k views

show all users on a Catalyst Cisco switch

I am new to Cisco, I am having some difficulty: I'd like to list all user accounts. show users only displays currently logged in users. I have no problem changing the enable password, but I'd like ...
0
votes
1answer
243 views

Cisco ASA Determine static NAT programmatically?

Is it possible to determine the static nats on an ASA 5550 or 5540 running 8.2(x) programmatically? I don't see it as an available SNMP oid but perhaps I am missing it.
3
votes
1answer
1k views

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I ...
3
votes
1answer
521 views

What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls [closed]

Have quite a few questions for Implementing Radius for my network devices : How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius ...
1
vote
0answers
926 views

ASA 5505 unable to get Lan2Lan and L2TP VPN's working together

I am connecting a remote ASA to a central site with the following settings: Phase 1 IKE: Encryption: DES Authentication: MD5 DH: DH2 Phase 2: Encryption: DES Authentication: MD5 I was getting the ...
0
votes
2answers
2k views

Outside VPN traffic not able to ping site-to-site VPN remote site

we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly. Site/Subnet A: 192.100.0.0 - local (8.4(4)) Site/Subnet B: 192.200.0.0 - ...
1
vote
1answer
1k views

ASA 5505 stops local internet when connected to VPN

I have a Cisco ASA router running firmware 8.2(5) which hosts an internal LAN on 192.168.30.0/24. I have used the VPN Wizard to setup L2TP access and I can connect in fine from a Windows box and can ...
1
vote
1answer
799 views

MAC to IP binding in ASA 5510 / SG 300-52

I am trying to configure a Cisco ASA 5510 to assign specific IP-addresses to specific MACs. Firmware on my ASA is 8.2(5). I have used this feature in our previous device (Cisco SA-520W). I have also ...
1
vote
1answer
447 views

Need help making site available externally

I'm trying to open a hole in the firewall (ASA 5505, v8.2) to allow external access to a Web application. Via ASDM (6.3?), I've added the server as a Public Server, which creates a static NAT entry ...
3
votes
2answers
799 views

Cisco ASA Port Forwarding for Newbies

I'm a contractor for a private school where I'm tasked with developing a public API to their database to use in mobile apps. They host their own website on school premises and their network is ...
3
votes
0answers
3k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
-1
votes
1answer
2k views

cisco asa + action drop issue

Have created a tunnel between 10.x.y.z network and 122.a.b.c ..the tunnel is up and active, but when I try the packet tracer output ..I get the ACTION as drop. I have also enabled ...
0
votes
1answer
1k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
2
votes
2answers
1k views

How to get Home, End, Delete keys working for PuTTY SSH sessions to Cisco ASA?

I want to be able to use Home, End and Delete keys when using PuTTY to access the CLI on my Cisco ASAs. Currently when I use these keys I see the ~ character. I have tried changing the PuTTY session ...