The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

0
votes
0answers
6 views

Cisco ASA5505 Public IP Address

I am trying to configure a Cisco ASA5505. I am using the GUI start up wizard. When I assign the outside IP address to be a public IP address the configuration will work but after about 30 seconds the ...
0
votes
1answer
1k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
0answers
3 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
2answers
2k views

Cisco ASA - Configure External Access to a Server

I'm trying to configure my ASA (ASA 8.4(2), ASDM 6.4(5) ) to allow external access to a server (using RDP). I've tried everything, but it doesn't seem to be working. I'm sure it is something simple ...
0
votes
1answer
21 views

Cisco ASA Outside to Outside NAT (forward from one public ip to another public IP)

I have an ASA (A) with a set of public IPs (A1..A6). And I have another server S with a public IP (S1) . I want all traffic to A2:22 NATed (forwarded) to S1:22. (SSH is just an example here) If ...
0
votes
0answers
24 views

Cisco ASA 5505 Access Rules/NAT

I need to allow traffic from any IP to a specific port in an ASA 5505 using ASDM 7.1. I've already created an Access Rule to do this but I ran a Packet Tracer and it gets dropped due to an "implicit ...
0
votes
0answers
17 views

Cisco ASA vague error

I'm getting a very vague error from my cisco ASA that connects our VPN to a branch office running a cisco router. I was hoping some one could give me some incite into how I could possibly pull more ...
0
votes
0answers
15 views

Giving vpn users access to all connected sites

I have a cooperate network which is connected to the remote branches through MPLS network.I'm wondering is there any way that I can give access to VPN client users to access the resources on other ...
4
votes
1answer
2k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
1
vote
2answers
69 views

Can I run commands from a file uploaded to my Cisco ASA 5500?

I have to run a lot of ACL/access-group and network-object commands, and I have found a 1024 character limit for each command - even if it spans multiple lines. In code, I use 1,000 chars as the ...
0
votes
1answer
46 views

Proxy servers and ASA5510

I am new to Cisco ASA5510 and need to configure it for following situation: Semi-isolated network 10.18.10.0/24 External excess is via high proxy server to ASA to low proxy server. Each proxy has 2 ...
3
votes
1answer
2k views

Configure Freeradius to check a connecting user against multiple LDAP groups

I'm setting up a Cisco ASA as a client vpn server. The appliance is relying on freeradius to authenticate the users. Freeradius has in turn been configured to query OpenLDAP. The modules/ldap file ...
2
votes
4answers
12k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
2
votes
1answer
1k views

Can't access ASA website to download ASDM launcher

Hoping someone can give me a pointer on here. I recently took a new position and am currently trying to learn the new system. I'm having trouble getting to ASDM and have Googled plenty to no avail. ...
4
votes
4answers
2k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
5
votes
1answer
49 views

ASA5505 slow downstream, fast upstream on VDSL PPPoE

We have recently switched our ADSL2+ connection for a VDSL Connection in our office. The only configuration change I have made to the Cisco ASA for this change, was to change the username/password on ...
1
vote
0answers
77 views

Route two public (ISP assigned) subnets on 'outside' interface of Cisco ASA 5510

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection. The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by ...
0
votes
0answers
40 views

Cisco ASA 8.2, accessing an internal webserver with an external IP-address together with port translation

We have one web server, let's call it SERVER01. It is running two different web servers that both uses HTTPS, INTERNALAPP on port 443 and EXTERNALAPP on port 444. In a previous setup we had an old ...
0
votes
0answers
21 views

ASA 5510 Youtube bandwith limit

Just want to know is it possible to set the limit for youtube. eg I have 45MBPS link, most of the bandwidth consume by youtube only, so i want to limit youtube to 5mbps for all mean for complete ...
2
votes
1answer
24 views

ASA Static Route over PPPoE interface

I have an ASA5505 with two PPPoE connections. I wish to add a static route to route just a single subnet over the new PPPoE connection, but the ASA does not seem to allow routing over interfaces ...
0
votes
1answer
1k views

How to properly add guest essid to cisco AP and asa5505

I have an ASA5505 configured with an inside and outside interface and DHCPD for the inside interface. Currently I have a cisco AP (forgot the model) broadcasting only a single essid for the internal ...
3
votes
5answers
6k views

ASA 5505, is BGP supported?

I need to configure BGP on an ASA 5505, according to certain sources it isn't supported, yet I can find resources on the internet giving information on how to configure BGP. I'd really like an ...
3
votes
2answers
42 views

Possible to use a console cable from a Cisco ASA and use it interactively with ESXi?

I'm creating procedures to deploy a Cisco ASA and an ESXi machine to remote locations where no local tech contacts are available. I think it may be a wise idea to connect the console cable from the ...
3
votes
1answer
127 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
1answer
1k views

VPN and overlapping subnets

I have a number of Cisco site-to-site VPNs between using ASA and Pix devices established for my clients. This is a hosted application and I need for the entire address range on the client's network to ...
1
vote
1answer
179 views

Cisco ASA 5505 No LAN access through VPN

I have been fighting with this ASA 5505 for a days now. I am verly new to networking and need support by the community! I have completely configured the CISCO 5505 allowing me to browse the internet ...
0
votes
1answer
48 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...
0
votes
1answer
82 views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
2
votes
1answer
101 views

Packet loss on between firewall and uplink?

I have a moderately complex network topology between my external firewall and the internet, as shown below. Every so often - I haven't found a pattern yet - we're getting a significant degree of ...
1
vote
2answers
1k views

Cisco ASA 5505 VPN - regular translation creation failed for protocol 50 src

I try to vpn from my home network to my company network and this has always worked well until yesterday when I installed a Cisco ASA 5505 at home. Now I can not connect from my home network to my ...
0
votes
0answers
39 views

Cisco ASA Access anyconnect from inside IPsec tunnel

I have a Cisco ASA on a dynamic WAN IP with a IPsec site-to-site tunnel to a remote linux host in a datacenter with a static WAN IP. All non local traffic is tunneled and the datacenter end is the ...
0
votes
0answers
134 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
0
votes
0answers
56 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
0
votes
0answers
279 views

Cannot enable shunning of IP scan attackers - error message on asa 5520

I've got the scanning threat detection turned on, in my Cisco ASA 5520, but someone turned off the option for "shun hosts detected by scanning threat". Now, when I try to enable it through the ASDM ...
1
vote
1answer
1k views

Fail-over VPN with two ISPs and Cisco ASA 5500 Series

We have a couple of branch offices that need to connect to a main site. We plan to use Cisco ASAs 5515 to establish VPN connections. We would also like to have 2 ISPs at each location to make the ...
1
vote
2answers
171 views

Cisco ASA 5505: Reach outside DNS address from inside

We use a Cisco ASA 5505 at our company. We have a dns A record (home.company.com) pointing to the external IP. In the ASA 5505 the http-port (80) is forwarded to an inside web server. No problem ...
1
vote
1answer
100 views

Text on Cisco ASA console is garbled/missing letters

I've actually looked up a number of solutions for this problem and none of them work. There's this Cisco ASA 5505 that I'd like to use, that outputs mildly garbled text with missing characters. I did ...
2
votes
1answer
103 views

Cisco ASA 5510 Out-of-Order Packets to Google

We're seeing a large number of packets being dropped due to being Out-of-Order. The numbers are large enough that it may be having an impact on network performance. We've isolated it down to a few ...
2
votes
2answers
403 views

Linux does not get IPv6 default gateway from Cisco ASA5510 on autoconf

My ASA 5510 has the following configuration for an interface. My Ubuntu box (2.6.35) connected to this network will correctly autoconf an IPv6 address, but it will not set a default route. interface ...
2
votes
0answers
67 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
0
votes
2answers
30 views

Can I NAT a public ip that is also used as a VPN peer

I have been reading books and sites on the web for two days and have tried all kinds of things to be able to ping a IP address further into my private network. The VPN tunnel is up and passing other ...
0
votes
0answers
84 views

ASA 5540 v8.4(3) vpn to ASA 5505 v8.2(5), tunnel up but I cant ping from 5505 to IP on other side

I am having problems pinging from a 5505(remote) to IP 10.160.70.10 in the network behind the 5540(HQ side). 5505 inside IP: 10.56.0.1 Out: 71.43.109.226 5540 Inside: 10.1.0.8 out: 64.129.214.27 I ...
2
votes
1answer
577 views

Strongswan VPN Established but no Packets Routed

I'm setting up a VPN using strongSwan between a Linux instance on an Amazon EC2 instance and a remote network via its Cisco concentrator. I need to route packets from the Linux instance itself a ...
0
votes
0answers
33 views

Cisco DNS Inspection disallows Reverse Lookup

I'm trying to use DNS Doctoring on my ASA 5505, but apparenly DNS Doctoring required DNS Inspection, and DNS Inspection forbids reverse lookup requests?! How do work around this? I did find this: ...
1
vote
1answer
49 views

DNS doctoring between 3 interfaces

I have a guest network with a range of 192.168.13.x on m y192.168.13.1 interace. I need it to get to my external webpage at 1.2.3.4 on my outside interface. The webserver itself sits in the DMZ at ...
2
votes
0answers
42 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
1
vote
1answer
2k views

How can I debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM?

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious ...
0
votes
1answer
171 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
1answer
42 views

Reading .pcap files by CISCO ASA5515-X

I have .pcap file that already includes thousands of packets. I want to analyze these packets via CISCO ASA5515-X to observe how much of them are possible to be an attack packet (malicious). However, ...
0
votes
0answers
31 views

AnyConnect certificate/CA pinning on Cisco ASA 5510

I would like to "pin" the certificate or at least the certificate authority for AnyConnect connections. Given the amount of SSL mitm'ing and compromised CA's, I want to ensure that only certificates ...