Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with firewall
Search options not deleted
user 17285
For questions about or relating to firewall operations, configuration and troubleshooting.
1
vote
1
answer
1k
views
Cisco ASA 5500 disable connection tracking
I have cisco ASA 5500 firewall and curious can i disable connection tracking for specific rules or protocol. …
- 4,389
4
votes
3
answers
652
views
Network design question
We moved them outside the firewall because they are very high intensity servers, firewall degrading performance and filling connection tables. … Does it OK to do NAT on firewall for Public Server or we should configure Routing?
I can add 10.x.x.x route in all Public server to hand off packet to Firewall. …
- 4,389
2
votes
1
answer
3k
views
Router stateful ACL
In stateful firewall you can do it because it hold state of connection but Router ACL isn't stateful.
How do i solve this problem? …
- 4,389
1
vote
1
answer
679
views
Cisco ACL reverse wildcard vs object-group
I have three service group, WWW, SMTP and FTP. I wanted to isolate using wildcard mask and divide them in logical subnet.
Example: We have 192.168.100.0/24 subnet, In short i want to give 50% IPs to …
- 4,389
1
vote
1
answer
477
views
ASA 5585-X with SSP-10 License
We are planning to buy ASA 5585-X SSP-10 so have question related licensing, what comes with base model? we need following feature does base model cover that without any extra license?
VLAN (number …
- 4,389
1
vote
1
answer
488
views
ASA 5585 licensing question
We have purchased Security Plus and output showing following, in Failover it's showing Active/Active does that means i can't configure Active/Standby ??
Licensed features for this platform:
Maximum P …
- 4,389
1
vote
1
answer
1k
views
Deactivate Security plus licence on ASA 5585
We activate Cisco licence L-ASA5585-SEC-PL (Security Plus) to enable 10G ports and everything working but now i want to deactivate that licence but i am getting this error
ciscoasa(config)# activati …
- 4,389
1
vote
1
answer
680
views
ASA 5585 Error ASA-MPC module found in wrong slot
We have following ASA 5585-x with two SSP-10 module and i am seeing following error when i plug my console on top (SSP-10) module.
****************************************************************
*** …
- 4,389
2
votes
Accepted
ASA anyconnect VPN restriction base on group
Solution:
This is what i did on radius, map TunelGroupName= ASA attributes with ldap group. and its working now.
/etc/raddb/users
DEFAULT Ldap-Group == "cn=sales,cn=groups,cn=compat,dc=example,dc=com" …
- 4,389
1
vote
0
answers
548
views
Cisco ASA 5585-x Failover Virtual MAC address
I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question i …
- 4,389
1
vote
1
answer
286
views
Cisco ACL performance question?
We have ASR1006 Router and we are running ACL on it to allow specific
port to specific server.
Question is there any ACL performance impact on individual IP vs full
subnet. like following example.
w …
- 4,389
1
vote
Cisco site-to-site vpn multiple subnet route over tunnel
This is so interesting. Solution is any ACL
access-list ACL-VPN extended permit ip any4 10.100.1.0 255.255.255.0
The Site-to-SiteS with AWS are different :) They only support one security associat …
- 4,389
2
votes
1
answer
2k
views
Cisco ASA failover monitor-interface policy
I have Cisco ASA 5585 and it has 10G interface in port channel where i configured multiple vlan sub-interface, is it worth to monitor every single sub-interface for failover policy or just monitor phy …
- 4,389
3
votes
1
answer
391
views
Cisco ASA5585-X replace SSP-20 with SSP-60
We have cisco ASA5585-X with SSP-20 running in production and we need more power so planning to replace SSP-20 with SSP-60 module but not sure we can just hot swap with SSP-20?
Does ASA5585-X support …
- 4,389
2
votes
2
answers
28k
views
ASA conn flags explain
I have seen following output, but what is the difference between UB vs UIOB vs UIO?
I looked at this website, and it has nice explanation, but I am having a hard time to decode it in context: https: …
- 4,389