The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (1)

0
votes
0answers
8 views

MIBs for SNMP bandwidth monitor on an ASA?

Cisco ASA 5512. Using DataDog. I'm polling ifHCOutOctets and ifHCInOctets via SNMP on my outside interface (ethernet from the provider). However the value seems to always reflect the same amount of ...
3
votes
1answer
27 views

Nmap external scan shows port open, ASA says port is not open, but do get an socket

Folks, have a weird one, need your expert help. For one of our heavily used external facing server which came up in an audit, nmap -Pn scan shows the following: Starting Nmap 5.51 ... Host ...
3
votes
0answers
865 views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
4
votes
1answer
3k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
0
votes
1answer
1k views

ASA 5510 Site to Site VPN works in one direction

I have setup a site to site VPN connection between two Cisco ASA 5510. One site (let's call it A) can see the private network of the other site (site B), but site B cannot see the private network of ...
0
votes
1answer
46 views

HttpServletRequest.getRemoteAddr() always returns 127.0.0.1

We're attempting to identify where specific requests are coming from inside our Java application. We have changed the log files to include the IP address and we're using ...
2
votes
4answers
15k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
0answers
26 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
2
votes
1answer
2k views

Strongswan VPN Established but no Packets Routed

I'm setting up a VPN using strongSwan between a Linux instance on an Amazon EC2 instance and a remote network via its Cisco concentrator. I need to route packets from the Linux instance itself a ...
0
votes
1answer
1k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
0answers
17 views

Cisco ASA 5505 VPN users access to local LAN denied

I have this running config: : Saved : ASA Version 8.2(5) ! hostname TESTATES domain-name TEST.com names name 192.168.1.0 AsusWireless ! interface Ethernet0/0 switchport access vlan 2 ! interface ...
1
vote
2answers
1k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
2
votes
2answers
1k views

Cisco ASA 5505 Config

I have looked through a lot of these posts on the Cisco ASA5505 as well as gone online. I am looking for some straight forward step by step instructions to complete the following tasks. I know how to ...
0
votes
1answer
1k views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
0
votes
1answer
1k views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
3
votes
2answers
325 views

Static public IP issue on Cisco ASA 5512x

This is our scenario: We have an Cisco ASA 5512x and we have 2 different Internet connections from different ISPs connected with it. ISP A is being used for the users browsing traffic(normal ...
4
votes
1answer
2k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
2
votes
0answers
31 views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
0
votes
0answers
11 views

Cisco Cryptochecksum generation

I ran 2 commands - a show start and a show run. I noticed that the cryptochecksums were different. My main question is understanding the cryptochecksum and how it is generated. Is it different ...
0
votes
0answers
9 views

Determining the side-effects of enabling unicast reverse-path forwarding on Cisco ASA 5505

I am trying to find out what (if any) negative side-effects there would be to enabling Unicast Reverse Path Forwarding (uRPF) on a Cisco ASA 5505 - I need to do this on a router which I do not have ...
-2
votes
1answer
85 views

Can I use ASA5505 to spoof the reply to a heartbeat request?

I have a CISCO ASA 5505 in a home office. It has two subnet, public and private. There is a wifi belkin router on the private net, which provides wifi for some users. That belkin router sends out ...
-1
votes
1answer
45 views

Find source(s) of dropped packages in Cisco ASA GUI

we are using pair of ASA 5520 Firewalls with ASDM 6.4. Can someone enlighten me, how to find out which is(are) the source or target ip(s) when we got a hugh bunch of dropped packages come in (by ASDM ...
0
votes
1answer
32 views

Need help understanding a bandwidth restriction on a Cisco ASA

We have a guest wireless network here and it's bandwidth is limited too 1 Meg per second. I did not configure this and am trying to pick it up. I've found these lines in the cisco config but i'm not ...
0
votes
1answer
239 views

Cisco ASA 5510 needs “clear arp <Interface>” periodically to reach a single host

ASA 9.0(3) The symptom is that I can ping from the ASA to any other host in that interface's subnet, save one particular host (that host can ping the interface on the ASA however). If I do "clear arp ...
1
vote
0answers
557 views

Route two public (ISP assigned) subnets on 'outside' interface of Cisco ASA 5510

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection. The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by ...
1
vote
5answers
72 views

Multiple Computers Running IIS with a Singular Public IP how to handle incoming communications?

At our company, we have three separate servers that house IIS currently. Each of these three servers have the same public IP address and essentially reside on the same network under different subnets. ...
3
votes
5answers
14k views

ASA 5505 Unable to launch device manager

I've seen similar errors posted but I think mine is a little different. I'm new to Cisco, and was given an ASA 5505 to configure. I intended to do a factory reset, but ended up running an erase, ...
2
votes
2answers
6k views

show all users on a Catalyst Cisco switch

I am new to Cisco, I am having some difficulty: I'd like to list all user accounts. show users only displays currently logged in users. I have no problem changing the enable password, but I'd like ...
0
votes
0answers
97 views

Cisco ASA firewall blocking requests to internally hosted DNS server

I have a DNS server behind a Cisco ASA firewall. The Cisco firewall is performing NAT. When inside the network, I can NSLOOKUP directly to the server. When the client is external, requests time out. ...
3
votes
1answer
4k views

Can't access ASA website to download ASDM launcher

Hoping someone can give me a pointer on here. I recently took a new position and am currently trying to learn the new system. I'm having trouble getting to ASDM and have Googled plenty to no avail. ...
3
votes
1answer
207 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
5
votes
2answers
10k views

Cisco ASA5510 Bandwidth Shaping/Limiting

This question is in two parts: Shape How can I limit the bandwidth on a ASA5510 to less than 10Mbps? Currently I have: policy-map shape_policy class class-default shape average 9000000 36096 ! ...
0
votes
0answers
39 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
2answers
76 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
1
vote
0answers
60 views

WatchGuard Authentication equivalent with Cisco ASA X series

I am in the process of implementing Cisco ASA 5512-X devices with FirePOWER to replace WatchGuard firewalls. The WatchGuard devices in use are currently wrapping access to various services with a ...
2
votes
3answers
119 views

Cisco ASA NAT - internal host see its public ip

I have a server hosted by a provider which uses Cisco ASA to do nat. The problem I have is that the internal server that is nat-ed with a public ip will see its public ip as source ip. This basically ...
0
votes
1answer
45 views

Cisco asa 5505 w/ seperate subnets and seperate isps

I am trying to join two networks together thru the asa. I have a 192.168.0.1 network that is the main domain and has its own isp and is administered by windows server 2008 for DNS and DHCP i also ...
0
votes
1answer
330 views

ASA 5505 can't add it to switch with VLAN

I have an ASA 5505 and a Cisco switch. I am trying to hook them up together. The ASA has an IP of 10.11.2.5. Servers on the VLAN 1102 on the switch has a default gateway of 10.11.2.1. I do a show ...
0
votes
3answers
878 views

Cisco ASA syslog over VPN tunnel

I am struggling to get my Cisco device to send syslog data to a remote server running behind a VPN tunnel. syslog IP 10.1.1.161 on the remote end. 10.23.2.0 is local subnet. SNMP polling from ...
0
votes
0answers
52 views

Cisco vpn access to another router

I am using a Cisco ASA 5505 to VPN into my network (which is working great), and I want to connect to a different network that is on a Asus RT-N66v. For example: network 10.1.1.1 is my VPN and ...
1
vote
1answer
110 views

Cisco ASA - difference between inside_access_in and inside_access_out?

So a minor problem we have is any internal servers have no (non-icmp) access to the outside is being blocked. Our current config is: inside_access_in any ---> any ---> icmp inside_access_out ...
1
vote
1answer
264 views

NAT Rule changes from ASA software 8.0 to 8.4

I have an Access Rule and a NAT rule that works fine with on the Security Appliance Software Version 8.0 The rule is as follows: However, I am having trouble making the same rule work on an ASA ...
3
votes
2answers
205 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...
0
votes
0answers
108 views

Route Email to external IP Cisco ASA 5515

I have a cisco ASA 5515X with two WAN connections and one LAN connection. As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1. ...
0
votes
2answers
88 views

ASA is not forwarding packets to egress interface

We are seeing some very strange behaviour from our Cisco ASA 5505 running 9.1(2) We have a SIP PBX inside our network. It's got a bit of an odd configuration, it listens for inbound SIP requests for ...
-1
votes
3answers
586 views

Cisco ASA - Restrict IP for WebVPN access

I've got a Cisco ASA5510 with Firmware Version 8.0(5). I'd like to restrict the source IPs that are allowed to access the Router through WebVPN (port 443). Here is the relevant part of the config. ...
0
votes
0answers
116 views

Include multiple sub-interfaces in Cisco ASA for VPN tunnel

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces. Say, In Cisco ASA 5550, I created multiple subinterfaces with VLAN ID as below: Inside, int0/1 : ...
2
votes
4answers
2k views

How to backup the configuration of a cisco switch and ASA to an SMB windows share?

How do I backup the configuration of a Cisco switch and ASA to an SMB Windows share? I have full enabled admin through SSH. what would be the full command to save it to an SMB share? Is it "show run, ...
0
votes
1answer
76 views

Secondary IPs on DMZ machines not working

I am moving some virtual machines from my DMZ in a bladecenter over to my new cisco UCS. We are using Hyper-V, and are running Server 2012 on the old bladecenter, and Server 2012r2 on the new UCS. ...