The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

learn more… | top users | synonyms (3)

8
votes
3answers
13k views

How do I reach my internal server on the external IP?

We are trying to configure our Cisco 5505, and it has been done through ASDM. There is one big problem that we're not able to solve, and that's when you go from inside to outside and back in again. ...
13
votes
4answers
6k views

Hardware firewall vs VMware firewall appliance

We have a debate in our office going on whether it's necessary to get a hardware firewall or set up a virtual one on our VMWare cluster. Our environment consists of 3 server nodes (16 cores w/ 64 GB ...
3
votes
3answers
4k views

What might prevent IKE handshake success in building an IPSEC tunnel?

We use Cisco ASA for our IPSEC VPNs, using the EZVPN method. From time to time we encounter problems where an ISP has made a change to their network and our VPN stops working. Nine times out of ten ...
3
votes
1answer
3k views

QoS on Cisco ASA 5505 by VLAN/subnet

My ASA 5505 has three VLANs. One connected to the internet called outside, one for our office called office (which connects to the corporate VPN) and one for a publicly accessible resource-centre. ...
1
vote
1answer
2k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
0
votes
2answers
2k views

Cisco ASA - Configure External Access to a Server

I'm trying to configure my ASA (ASA 8.4(2), ASDM 6.4(5) ) to allow external access to a server (using RDP). I've tried everything, but it doesn't seem to be working. I'm sure it is something simple ...
7
votes
2answers
810 views

Routing via Cisco ASA is changing TCP sequence/ACK numbers

Our network has a dedicated VPN appliance that sits inside the office network. We have a Cisco ASA with a static route that routes the VPN subnets to the VPN appliance. So a typical request from the ...
1
vote
1answer
550 views

Inside Users can´t reach the DMZ, as well as outside from my cisco ASA 5520 v.7

I'm configuring my Cisco ASA 5520 version 7 and below is the show run of the machine: ASA2> ASA2> en Password: ASA2# sh run : Saved : ASA Version 7.0(8) ! hostname xxxxxxxxxx domain-name ...
0
votes
1answer
2k views

Cisco ASA 5505 Voice/Data VLANs not pinging/routing

Hi i am very new to Cisco ASA 5000 series and have two interfaces that i would like to route between, a data network 192.168.69.0/24 and voice 192.168.70.0/24, I have addded both and can ping the ...
0
votes
1answer
533 views

Outside or Internet users canot reach my dmz

Hi everyone out there. I have configured my aa 5520 v7. and so far im facing a problem in my connection and therefore i wish someone here can help me to sort it out. wright now Internal network can ...
6
votes
2answers
2k views

DMZ subnet: to NAT or not to NAT?

I'm looking at setting up a DMZ behind a Cisco ASA that will contain a large number of HTTP front-end load balancers and SSL offload services - over 100 IPs, concentrated on a smaller number of hosts. ...
4
votes
1answer
982 views

ASA 5505 vLAN Routing - 2 LAN 1 WAN

I am setting up a Cisco ASA 5505 with the base license. TCP/UDP communication works from inside->outside, outside->inside, inside->secure, which is my desired traffic security. HTTP, SSH, and other ...
3
votes
1answer
2k views

Cisco ASA 5510 Time of Day Based Policing

I have a Cisco ASA 5510 setup at a boarding school. I determined that many (most?) of the students were downloading files, watching movies, etc, during the day and this was causing the academic side ...
3
votes
3answers
12k views

Cisco ASA logs “regular translation creation failed for icmp …” for DNS traffic, yet it works

Every few minutes our Cisco ASA 5505 firewall is logging errors that I can't figure out with my limited Cisco experience. Severity Date Time Syslog ID Source IP Destination IP ...
2
votes
1answer
1k views

Cisco ASA Nat 8.4

I'm trying to get port forwarding on my ASA working. I'm using: object network server1 nat (inside,outside) static interface service tcp 25 25 and an access list, and it works fine, however, I ...
2
votes
3answers
9k views

PPTP pass through on Cisco ASA 5505 (8.2)

Is it possible to setup PPTP VPN traffic (clients outside and server inside) to passthrough a Cisco ASA 5505 if the outside IP address is also being used for PAT? The Cisco examples forward all NAT ...
1
vote
3answers
6k views

What does the Cisco ASA command “management-access” do?

I'm working with a Cisco ASA 5510. I changed the management interface to a different interface. I used the command "management-access" to get the new interface working, but the old interface ...
4
votes
3answers
3k views

Does Windows 7 VPN work with a Cisco ASA 5510

We have a Cisco ASA 5510 router and are trying to get a couple users setup for VPN access. They are running Windows 7 x64 at home and cannot install the VPN client we have for our router (it only ...
3
votes
3answers
5k views

Cisco ASA 5505 inside interface multiple ip addresses

I have an issue this morning where I want to be able to assign multiple ip addresses to the inside interface to facilitate an ip range migration for an office. Namely from a 192.168.1.x range to the ...
2
votes
2answers
1k views

How to get Home, End, Delete keys working for PuTTY SSH sessions to Cisco ASA?

I want to be able to use Home, End and Delete keys when using PuTTY to access the CLI on my Cisco ASAs. Currently when I use these keys I see the ~ character. I have tried changing the PuTTY session ...
2
votes
3answers
3k views

Cisco VPN Client Behind ASA 5505

I'm trying to get connected to another ASA via Cisco VPN Client. I am behind an ASA 5505 myself and I am tryihng to VPN to a 5510. I get the message: Secure VPN Connection terminated locally by the ...
1
vote
1answer
2k views

Openswan Cisco ASA 9.1 — cannot resopnd to IPsec SA request because no connection is known for

Ok, so I have a simple VPN IPSEC setup with a single Linux host that has a public IP address and a loopback interface of 172.16.255.1. On the right side I have a Cisco ASA 5505 9.1. the issue is the ...
1
vote
2answers
3k views

Cisco ASA5505 won't sync with NTP

Today I noticed that the clock my Cisco ASA 5505 firewall was running about 15 minutes late, which surprised me since I've set up the NTP client. My two NTP servers 10.10.0.1 and 10.10.0.2 are ...
1
vote
2answers
772 views

How to disable dns doctoring for IPSEC VPN connections for ASA 5510

*Update, turns out that adding additional nat exclusions stopped dns doctoring from being triggered, resolving the problem. So I have one last outstanding issue with our vpn setup to our office. I ...
1
vote
1answer
506 views

Finding source of RST packet on ASA 5505

I've ran wireshark on our app server and noticed a reset packet is commonly being received when sending data to a remote telnet server when the connection has been idle for an hour or so. I've read ...
1
vote
1answer
908 views

Route traffic on vpn to another interface on an ASA 5510

I have a ASA 5510 that has about 60-70 vpn tunnels. I have four interfaces on the device: 1)External, 2)192.168.1.0, 3)192.168.2.0, 4) 192.168.3.0 A VPN tunnel is configured from the remote site ...
0
votes
2answers
650 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
1answer
296 views

Cisco ASA failover can't ping gateway

I'm currently trying to set up a failover network for my Cisco ASA 55x0 using the SLA traking. I have the "outside" interface (network 89.x.x.48/29) and the "outside2" interface (network ...
0
votes
1answer
1k views

Cisco ASA 5540_outside to inside traffic NAT

This is for a test lab setup: landing server(192.168.49.26)---(.49.25/29)Cisco6500(.49.1/29)---(49.2)Cisco ASA(x.x.55.81)---External The C6500 is the core of the test lab to which the "landing ...
0
votes
1answer
824 views

Dual ISPs - Load balancing

We currently have 1 ISP and are adding a second. I need to load balance this into our current network so it shares the bandwidth between our 2 ISPs. We have a total of about 10 external IP addresses ...
0
votes
2answers
3k views

Can't access shared drive when connecting over VPN

I can ping all network devices but it doesn't seem that DNS is resolving their hostnames. ipconfig/ all is showing that I am pointing to the correct dns server. I can "ping "dnsname"" and it will ...
0
votes
1answer
3k views

Cisco ASA: How to route PPPoE-assigned subnet?

We've just received a fiber uplink, and I'm trying to configure our Cisco ASA 5505 to properly use it. The provider requires us to connect via PPPoE, and I managed to configure the ASA as a PPPoE ...