Questions tagged [cisco-asa]

Cisco's Adaptive Security Appliance (ASA) which combines functionality from the PIX, VPN 3000 series and Intrusion Prevention Systems (IPS) product lines

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

how to add ip phone after ASA firewall? [closed]

hi i configure this topology without asa which is working fine , but i have to add asa between router and switch don't know too much about asa. This is the configuration i did for the topology can ...
0
votes
0answers
16 views

ASA ping outside to inside private ip's?

i am new asa and cisco as well , what i am trying to do to perform this lab , only 1 issue is there , i need help in it, i can ping from pc0 to router0 in other way I can ping inside to outside , but ...
0
votes
0answers
34 views

Users after login are redirected to the ASA AnyConnect download page rather than connecting to the VPN

Several users after logging in are redirected to the ASA AnyConnect download section instead of connecting to the VPN. We try to log in via Web or AnyConnect application by using SAML Identity ...
0
votes
1answer
30 views

Cisco ASA 5506-X: clients periodically lose Internet access

Clients periodically lose Internet access, but I can connect to Cisco ASA and manage it. If i am ping sites, it works: Minsk# ping yandex.ru Type escape sequence to abort. Sending 5, 100-byte ICMP ...
0
votes
0answers
14 views

Cisco ASA 5516-X Wont communicate on inside interface at all. No packets

I'm configuring a brand new ASA and the Firewall refuses to communicate on my inside interface. No matter the traffic type, its denied by implicit deny every time. I was hoping to get some feedback/...
1
vote
1answer
28 views

Site to site ASA Routing question

I am doing a lab about DMVPN and Site to Site ASA integration. There is no problem in the DMVPN. However I have problem in establishing route from Site to Site ASA to DMVPN. The router on the left is ...
1
vote
0answers
40 views

Cisco ASA 5585-x Failover Virtual MAC address

I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question ...
1
vote
0answers
16 views

Cisco ASA NSEL Template IDs 256-271: Is there a list of names and functions? [closed]

I am trying to interpret Cisco ASA NSEL data, which I understand is similar to Netflow v9 but uses biflow records along with static data templates. I see data templates 256-271 in template frames, and ...
1
vote
0answers
20 views

Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506

We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
1
vote
2answers
44 views

Connecting an ASA behind an AT&T router/gateway

I am attempting to setup a temporary network for a company in transition that is moving into a new building. They just bought and had installed an AT&T business internet connection. They have a ...
0
votes
1answer
34 views

Much ARP requests from Cisco ASA 5510

An employee of the ISP writes to me that a lot of ARP requests from us go to them. ISP equipment log: 07:47:27.732242 ARP, Request who-has AAA.BBB.CCC.213 tell AAA.BBB.CCC.53, length 46 07:47:27....
0
votes
1answer
25 views

What is method to switch group-policy on a tunnel-group upon user login?

We have ASA units that have tunnel-groups that have a particular group-policy defined via default-group-policy statement. This initial group-policy ("NOACCESS") is one that prevents any ...
1
vote
2answers
74 views

What device manages VLANs?

I understand what a VLAN is and what purpose it serves. However, I'm having a difficult time understanding where VLANs orginate. Specifically, I know CISCO firewalls, switches, and routers all deal ...
0
votes
0answers
11 views

Site to Site VPN between Cisco ASA and Aruba Virtual Gateway

We have hosted an Aruba Virtual Gateway on AWS. All the configurations are done as per the documentation of Aruba VPNC. Through AWS security policies, UDP 4500 is open on AWS side. We want to ...
2
votes
3answers
357 views

What is the difference between an ASA firewall and UTM firewall?

How do ASA firewalls and UTM perimeter firewalls differ?
1
vote
0answers
64 views

Cisco ASA 5506: Adding two public IP's that are on the same subnet for the primary and backup interface

Im programming a Cisco ASA 5506. I need to add a primary (public) IP that is x.x.x.82/24 and a backup IP that is x.x.x.81/24. The ASA wont allow me to do this as it gives me an error: "the IP ...
0
votes
1answer
28 views

Cisco ASA: What is the best way to restrict access of nodes in the same network to each other? [closed]

There is a network with five nodes on one interface. These nodes should not be accessible to each other. An option is to use an ACL, but is there another way?
1
vote
3answers
74 views

Static NAT and PAT

I have two private IP addresses, want to make them NAT to 203.0.113.0/2 public IP address. WAY 1 : Static NAT (2 ip addresses NATted to one by manually) WAY 2 : PAT (Router gives port number ...
0
votes
3answers
55 views

Cisco ASA Port Forwarding

I am trying to set up port forwarding on my Cisco ASA security appliance. I have tried several tutorials and can not seem to get it to work. The ASA is set up behind my internet providers gateway. ...
1
vote
1answer
252 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
1
vote
1answer
63 views

VLAN Subinterface Removal - CISCO ASA

The below are the configuration of the subinterfaces in Cisco ASA firewall and currently sub-interface 0/1.1 is only passing traffic and I need to remove 0/1.2 configuration from here as it is unused. ...
1
vote
2answers
662 views

IKEv2 tunnel between ASA and Mikrotik

Trying to move from pfSense to Mikrotik for an office router, and the only stumbling block is maintaining a site-to-site IPSEC tunnel between it and our Cisco ASA. The settings all look correct to me, ...
0
votes
0answers
23 views

How can I get a CRL automatically on cisco ASA? Do I have to configure OCSP?

I need to get a CRL on cisco ASA without requesting a crl manually. Do I have to configure OSCP, or is there anything else to get a crl automatically?
0
votes
1answer
26 views

Is it possible management IP address of ASA don't move to the new active ASA when failover happen?

I created a failover configuration on two ASA5545s. I set up, for example, 10.10.10.1 on the management interface of the primary ASA and 10.10.10.2 on the secondary ASA. I know when a failoever happen,...
0
votes
0answers
367 views

Cisco ASA and missing logs to syslog server

I would like to have some help with sending syslogs from a Cisco ASA 5555-X to a syslog server, graylog 3.2.1. When running the following settings I could see a lot of information in the buffer with ...
0
votes
0answers
50 views

Advanced split tunnel question

We are in a work from home state, and I am looking at optimizing VPN without sacrificing security. We are not using split tunnel. We have Direct Access on most clients - it is slow, and have moved ...
2
votes
1answer
37 views

Cisco ASA NAT/PAT Multiple WAN IPs

I'm trying to setup a NAT / PAT in ASA 5520, I'm able to do so very well when the Public IP I want translated to Internal host is configured on the Outside. Question is the ISP provided 1.1.1.1/30 ...
0
votes
1answer
218 views

Cisco ASA IPSec Site-to-Site VPN Rx Bytes not increasing

I have IPsec Site-to-Site VPN from my ASA to customer. After customer complain about VPN down, I reset the tunnel now I can see Login time duration 12h:34m Byte TX is 543240 and Byte Rx is 0. What ...
1
vote
1answer
44 views

Port Forwarding on Cisco ASA 5510

I have an EDI server behind a Cisco ASA 5510 version 8.2(1). Currently our EDI server sends over documents to our trading partners and they will look for our URL in this format http://1.1.1.1:1000. ...
0
votes
1answer
146 views

IKEV2 between ASA and Router problem

I am trying to configure a ikev2 vpn between asa and router using tunnel interface. I have encountered the problem of it not even establishing the connection. There is no problem in the connectivity ...
2
votes
0answers
82 views

Cisco ASA static nat one-to-many from interface address to object-group

Syntactically, the following set of statements is valid (at least as of 8.3): interface Ethernet0/0 nameif OUTSIDE ip address 192.0.2.1 255.255.255.0 interface Ethernet0/1 nameif INSIDE ip ...
1
vote
1answer
485 views

Slow(er) network speed due to possible VPN configuration issue?

CONTEXT I have an VPN connection between 2 ASA-5515's set up between our main site and new back up site. This is to replace our old backup site we have which is currently connected between an ASA-...
1
vote
1answer
55 views

ASA shows Action:Drop on packet-tracer, no reason or phase

I am doing a very simple lab with one asa and two computers. PC1 connected to dms PC2 connected to outside : Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) : ASA ...
1
vote
0answers
52 views

Network transfer speed slow, possible VPN configuration issue? [closed]

CONTEXT I have an VPN connection between 2 ASA-5515's set up between our main site and new back up site. This is to replace our old backup site we have which is currently connected between an ASA-...
1
vote
1answer
298 views

Traffic redirection and failover of ASA with multiple ISPs [closed]

I have two ISP connections on two Cisco 3900 routers, in front of Cisco asa 5525 x with firepower services firewall. I want to configure the firewall to redirect traffic based on the source address ...
1
vote
1answer
48 views

Swapping to new ASA hardware - same configuration - what are the pitfalls?

I am replacing some old ASA 5515 with some new ASA 5516. We are going from a set up whereby we managed the boxes to one where a 3rd party is now managing them. I am currently going through the ...
3
votes
1answer
124 views

Cisco ASA5585-X replace SSP-20 with SSP-60

We have cisco ASA5585-X with SSP-20 running in production and we need more power so planning to replace SSP-20 with SSP-60 module but not sure we can just hot swap with SSP-20? Does ASA5585-X support ...
1
vote
1answer
40 views

IPSec does not work via backup interface

Cisco ASA 5506-X connected to two ISP - main and standby channel, interfaces outside_1 and outside_2. IPSec works via outside_1, but does not work via outside_2, if outside_1 down. At this moment ...
2
votes
1answer
55 views

Cisco 5505 ASA firewall Ipsec vpn- Can connect two outside different public ip to two different local subnets

I only get one IPSEC vpn connection up but not the other. Link to access configs on Google: https://drive.google.com/open?id=1yB_yIWvJ51A0UeNbkAEiTH9YMIEipqy_ profile1- outside interface - 66.x.x.x ...
0
votes
1answer
143 views

Cisco ASA and a Router?

I'm trying to understand networking and when looking at the different routers, firewalls and switches, I came across Cisco ASA which many use for firewall and routing abilities, so if you use an ASA ...
2
votes
3answers
558 views

Cisco ASA 5512X does not allow connections across VLANs to internet

First time doing a network, I'm a software guy normally. I am setting up a network to share and internet connections to multiple properties. The goal is to segment each property onto its own VLAN. I ...
2
votes
1answer
206 views

Can I set the AnyConnect group policy from users source IP?

Is it possible to configure a Group Policy to be used based on the source IP of the AnyConnect user? I want users connecting from a specific location (IP address) to get a specific Group policy. ...
1
vote
1answer
394 views

DNS expire-entry-timer has negative affect on ASA using FQDN ACL

I have a Cisco ASA using FQDN egress ACLs for a host that changes IP addresses every 10 mins (Apple APNS IP address pool). As soon as the TTL expires for the addresses, my internal server requests a ...
1
vote
1answer
177 views

Arpping responding with Cisco ASA interface mac address and mac address of machine

For some reason our Cisco is responding to arp requests between machines on the same switch. It's not breaking anything but it is slowing initial connections. I've been making a lot of changes on the ...
0
votes
2answers
525 views

Cisco ASA IKE Receiver: Runt ISAKMP packet discarded on Port 500

I have lots of ikev1 tunnel running on our production Cisco ASA5585 and today i have configured ikev2 tunnel for one of our new customer and i have started seeing following error, and not sure what is ...
1
vote
1answer
209 views

Cisco ASA looping broadcast packet

I have small office where running cisco ASA ASA5506 and version 9.4(1) and it's also configured for IPsec VPN tunnel, My LAN subnet is 10.1.1.0/24 So i have found very interesting things in LAN ...
1
vote
0answers
182 views

Static PAT using Cisco ASA 5506 in cisco packet tracer [closed]

ciscoasa(config)#interface GigabitEthernet 1/3 ciscoasa(config-if)#nameif inside1 INFO: Security level for "inside1" set to 0 by default. ciscoasa(config-if)#security-level 100 ciscoasa(config-if)#no ...
1
vote
1answer
292 views

delete object network in cisco ASA with packet tracert

I used 5506 as firewall and I am trying to delete object network I created and it gives error as ERROR: unable to delete the object configuration. object (inside-net-obj) is being used. commands I ...
0
votes
1answer
96 views

ASA ISP limit of ISP Speed

I've got configured ASA with two ISP. First is main ISP and second for backup. Is possible to set on conf of ASA if the speed of main ISP will be at low bandwith, ASA will active a backup ISP?
4
votes
0answers
857 views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...

1
2 3 4 5
13