Cisco Firewall :: ASA 5500 - Get Firewall License To 500 Users?

Jan 25, 2012

I purchased the license P/N: ASA-CSC20-250U-1Y with Description: ASA 5500 CSC-SSM-20 250-User License Only Renewal (1-year)
But I had a mistake because I need support to 500 users. Now, to solve my mistake I want to know Do I can purchase another ASA-CSC20-250U-1Y to provide the 500 users suppor?
I mean, ¿are two (2) ASA-CSC20-250U-1Y equivalent to the 500 user license listed below?P/N, ASA-CSC20-500U-1Y  with Description: ASA 5500 CSC-SSM-20 500-User License Only Renewal (1-year)

View 1 Replies


Cisco Firewall :: ASA Trial License 5500 Required

Feb 24, 2011

Is there a Security Plus trial license available for the ASA 5500 series? I currently have one sitting around that I would like to use for testing, but it only has the base license.

View 2 Replies View Related

Cisco Firewall :: License And Hardware Changing 5500 Series

Aug 8, 2011

I bought a 5500 series ASA and SecPlus license for example. Suddenly my ASA hardware got broken and changed for a new one. What about my old license? How i could activate this license on new ASA?

View 2 Replies View Related

Cisco Firewall :: ASA5505 - Can NAT May Be Used For More Than 10 Users With License

Apr 20, 2012

I have 10 user license for Cisco ASA, i have to use this ASA for client connectivity. Can i do NAT of more than 10 users with this license? What i understand is NO.

But as per Below explaination looks like, i can if i am not doing default routing? Actually i just need to add a specific Route towards client DMZ interface on my ASA, no default route, so can i use more than 10 concurrent sessions with this license?

View 5 Replies View Related

Cisco Firewall :: Support Of Jumbo Frames On ASA 5500 Firewall Appliance?

Feb 28, 2010

Can any ASA 5500 in particular the ASA5510 firewall support jumbo frames (i.e. greater than the default standard 1500 Bytes frames)?. I plan to use the ASAs to setup a point-to-point IPSec tunnel and need an Application frame of 4Kbytes intact and not segment it.I have done little checking on the Cisco Website and see it mention of Jumbo frames on the 5580 on 10Gig interface but didn't see mention 5510. 5580s are way over-kill and expensive for what I need is to run a mission critical one IPSec point-to-point with maximum of no more than 100Kbps so 5510 is perfect for me but not sure if it can carry the jumbo frame?
On the routers and switches it's the MTU settings and they are configurable per interface and I am OK and the circuit is T1 which the Telcos said it's OK since it's physical layer so the only unkown is the firewall.

View 2 Replies View Related

Cisco Firewall :: Difference Of VPN Plus License And Security Plus License ASA 5520

Oct 16, 2012

What's the difference between VPN Plus license and Security Plus license. I have new 5520 shipped with VPN Plus license.Also does it require a seperate license for Anyconnect for Mobile and AnyConnect Essentials.

View 1 Replies View Related

Cisco Firewall :: Is ASA 5510 Firewall Required Any Subscription Or License

Nov 15, 2012

I am quite new to firewall, in my company one asa 5510 firewall is there.I configured inside, outside, dns, dhcp and nating.I need to config bandwidth limit (1Mbps) for inside port and I restruct like facebook, youtube and pornsites..And I heard that some subscription is required, really is it required?

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - Users Unable To Access Internet Through Firewall

Feb 26, 2013

I have some problem with the ASA 5510 ver 7.0(6). My manager wants to keep this as backup. tried lots of things but still users not able to access internet nor can i ping anywhere.For example when i ping i dont get any reply.The runing config is below for ur ref :
HQ-ASA-01# show  running-config
: Saved


View 9 Replies View Related

Cisco Firewall :: Users Behind ASA5505 Firewall Are Unable To Access Internet

Feb 24, 2011

I have a normal setup of ASA5505 (without security license) connected behind an internet router. From the ASA5505 console I can ping the Internet. However, users behind the Firewall on the internal LAN, cannot ping the Internet even though NATing is configured. The users can ping the Inside interface of the Firewall so there is no internal reachability problem. In addition, I noticed that the NAT inside access list is not having any hit counts at all when users are trying to reach the internet.

When i replace the ASA5505 with a router with NAT overload configuration on it, the setup works normally and users are able to browse the internet.

The ASA5505 configuration is shown below.

hostname Firewall

interface Ethernet0/0
description Connected To Internet Router
switchport access vlan 10


View 2 Replies View Related

Cisco Firewall :: ASA 5500 Configuration For VC?

Aug 13, 2012

i have to open ports for vedio conferencing in my Firewall configuration ,

View 1 Replies View Related

Cisco Firewall :: ASA 5500 Ssl Vpn Required

Jun 14, 2011

I have two ASA 5510 with Security Plus license and Shared SSL VPN licensing enabled.

The problem is that the client get “Session could not be established: session limit of 25 reached” but ther is only 6 ssl vpn user connected with AnyConnect.The software on the firewall’s is 8.2(1)Is there any BUG in this software related to this problem?

View 1 Replies View Related

Cisco Firewall :: Monitoring SMTP On An ASA 5500?

Mar 5, 2012

I have an ASA 5500 Firewall. I need to figure out how to log all events using Port 25 to determine if there are any rogue devices on our network. I was trying to figure out how to do this via the Real-Time Monitoring (filter) but have had no success.

View 1 Replies View Related

Cisco Firewall :: Getting Email Delay On ASA 5500

Jun 6, 2012

I have an issue with a Cisco ASA 5520. It seems to block some emails incoming from some recipients. The sender's mail server clearly reports my ASA as cause of the problem (see attached image). Unfortunately I have not the logs about that event and the time frame to close this issue is very narrow.

View 5 Replies View Related

Cisco Firewall :: Configuring VoIP On ASA 5500?

Nov 20, 2011

We have to set up voip for our network(for 50 phones not he cisco phones).
I need to just the route the voip traffic to gateway address of telephonic company(  where they provide us the connectivity for the setination call.
What sort of protocols should i have to enable in pix i saw the concepts like sip, h323, ras, skinny.
We are using only voip for asa and no data or other traffic should be allowed.
inside adrees: for all voip phones
telephoneic gateway:

View 1 Replies View Related

Cisco Firewall :: Shut Down AUX Port On ASA 5500?

Oct 23, 2011

Is there a way to shut down the AUX port on the ASA?

View 1 Replies View Related

Cisco Firewall :: ASA 5500 - Upgrade Image To 8.4(3)?

Apr 3, 2012

We are now using image 8.0(4) for my ASA 5510. Later on, I would like to upgrade the image to 8.4(3).May I have to know what difference for those images, what should I take care of the script?

View 1 Replies View Related

Cisco Firewall :: Stateless Filter In ASA 5500

May 21, 2011

Does ASA 5500 has stateless filter to drop packet even when 3-way handshake is finished
For example,
1: 3-way handshake is done

2:client send data to server

3:I apply a statless filter to the incoming interface to drop the packet from the client

View 3 Replies View Related

Cisco Firewall :: ASA 5500 And ICMP Unreachable

Jun 27, 2012

Is it really the case that the ASA will not generate ICMP Host Unreachable messages for sub nets connected to any of its interfaces (in breach of RFC1812) as claimed here: [URL]

I'm investigating a situation where an organization uses ASAs to control traffic between different v lans in their internal production systems as well as Internet traffic.  They are having problems with internal load balancing because the ASAs do not (as currently configured) generate Host Unreachable packets.  Can this be changed in the configuration or not?  I have to say, if it can't then I'd urge them to find something else to route between their internal sub nets.

View 5 Replies View Related

Cisco Firewall :: BOM Product Licensing Of 5500 ASA

Aug 27, 2011

I am pretty new to cisco and the learning community forums is truely one of a  kind.Actually, I work on a company which deals the Cisco products, Routers/Firewalls/Switches and stuffs. I am sure you get the picture. What confuses me is the product licensing of ASA5500. To be more specific, we are proposing certain things. And that came with the product pricing sets and all. But I amn't having a clear picture on ASA 5500 Strong Encryption License (3DES/AES). Does that come inbuilt(free) or should there be any pricing behind that!?

View 5 Replies View Related

Cisco VPN :: ASA 5500 - Facing Bug When Users Connect To SSL

May 23, 2012

We are facing a bug with our ASA 5500 series (version 8.5.26) and the Internet explorer when the users connect to ssl vpn and they are not able to connect to the network resources like their PCs and the Cisco port forwarder keep asking for its installation
We already updated the ASA version installed in the user's computers the Microsoft kill bit patch.

View 12 Replies View Related

Cisco Firewall :: Getting CSC-SSM-20 Renewal License?

Jan 10, 2012

i have CSC-SSM-20  i want to renew the license to support 750 users for 3 years if i have base license only and if i have base and plus as bundle?i want to know the steps and also the part numbers and what is the difference between these two part numbers
ASA-CSC20-750UP-1YASA 5500   CSC-SSM-20 750-User w/ Plus Lic. Renewal (1-year)
  ASA-CSC20-750P-1YASA 5500   CSC-SSM-20 750-User Plus Lic. Only Renewal (1-yr) 

View 2 Replies View Related

Cisco Firewall :: Can Buy Plus License For ASA 5520

Jan 11, 2012

Can i buy a plus license for asa 5520??

View 2 Replies View Related

Cisco Firewall :: See License For The SSM-10 Card?

Mar 25, 2013

My customer is asking to see the license for the SSM-10 card how do i access the card to show this information. the Firewall unit has a base licence installed.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 - 3 DES License

May 20, 2013

I'm new to ASA and bought a used one from ebay but I cannot connect to the ASDM - I get an error in all the browsers.
Cannot communicate securely with peer: no common encryption algorithm(s).
(Error code: ssl_error_no_cypher_overlap)
Having browsed the support forums and Google - it seems I need the 3DES license. I have obtained an activation key from Cisco and applied it to my ASA 5505 however I get a warning about the device is licensed for a higher software level. the license on the ASA is Security plus. When I apply the activation key from Cisco most of the features are disabled.

[Code] ......

View 4 Replies View Related

Cisco Firewall :: ASA 5500 - PPPoE Session Duration

Sep 18, 2012

How can i determine the current PPPoE session duration on ASA 5500 Systems? If i use the different CLI commands like "show vpdn session state / show vpdn session pppoe state" the output says:

State: SESSION_UP Last Chg: 593595 secs.
The ISP is forcing a reconnect every 86400 seconds, so the value can't be the actual duration of the pppoe session. Does it only indicate the link duration to the attached modem or interface state? Is the only way to detect interruptions of the pppoe session with debug and syslog?

View 0 Replies View Related

Cisco Firewall :: Can Configure More Than One Syslog Host On ASA 5500

May 31, 2012

I would like to send my ASA 5500 logs to more than one syslog server - is this possible?  I can't seem to find it in the documentation.

View 3 Replies View Related

Cisco Firewall :: Redirect Ip Address For Protocol With ASA 5500

Jan 5, 2012

On the inside interface and network, we have a server at, (as an example), which acts as an email server.
The outside ip address of the ASA is, say,
The ASA directs any imap requests from the outside interface to, which works fine from the outside. Users simply open up email, and collect emails etc.
When they come inside the office, their machine of course attempts to contact the ip address the ASA knows it is outside interface, so they are unable to collect emails.
that any internal IMAP requests from machines on the inside to are directed to the machine inside on

View 5 Replies View Related

Cisco Firewall :: 5500 ADSM 6.3 Can't Open Dialogue Box

Jan 3, 2012

i'm having issues with ASDM 6.3 on my ASA 5500.When i try to add a policy under firewall --> service policy rules (Add Service Policy Rule Wizard - Rule Actions), i'm not able to add a netflow policy as I'm not presented with a dialogue box after I press "add".i've tried this from multiple computers mac os and windows.

View 9 Replies View Related

Cisco Firewall :: IPS Module Setup On 5500-X Series ASA

May 16, 2013

Since the 5500X series firewalls use a software IPS SSM that is set up differently from the old ones, I am a little confused on the initial setup.
we see a proposed setup for L3 management of the IPS
interface GigabitEthernet0/0
nameif outside security-level 0
ip address


View 1 Replies View Related

Cisco Firewall :: ASA 5500 - Transparent And Routed Mode

Jun 26, 2012

have a Cisco ASA that I am trying to configure in a unique way, I want it to perform a variety of tasks;
VPN Tunnels
Firewall Inside to Outside via versa
But the difficult task, is creating a DMZ with devices that are assigned fully routed IP addresses from our ISP directly, these are H323 and SIP devices that cannot use NAT, and must have a fully routed IP address assigned to them.
Obviously the problem I have with the Firewall in its default routed mode, is that it wont allow me to overlap IP addresses on the outside interface with the DMZ interface.
Could the Firewall be configured for Transparent mode between Outside and DMZ, but Routed mode between Outside and Inside?
Eth0/0: 10.0.0./24 (inside)
Eth0/1: (dmz)
Eth0/2: (outside)

But could the new Cisco ASA with the latest firmware and model be ale to do this with 1 physical firewall?

View 5 Replies View Related

Cisco Firewall :: Installing A Wildcard Cert On ASA 5500

Apr 15, 2013

I am basically looking to install the wildcard on the outside interface for my ASA

View 1 Replies View Related

Cisco Firewall :: Does ASA 5500 Have Email Alert Function

Oct 7, 2012

If asa finds the abnormal behavior, can set up and send email to administrative mailbox?

View 6 Replies View Related

Cisco Firewall :: ASA 5500 Static Dhcp Binding?

Sep 30, 2011

Can the DHCP server on an ASA be configured with static bindings like IOS routers can?

View 2 Replies View Related

Copyrights 2005-15, All rights reserved