Cisco Firewall :: ASA 5510 / URL Paths And Regular Expressions In ASDM?

Apr 2, 2012

I've recently switched to an ASA 5510 on 8.4(3) coming from a Checkpoint NGX platform (let's say fairly quickly and without much warning ). I have a couple questions and they're kind of similar so I'll post them up. I've read docs about regex and creating them both via command line and ASDM, but the examples always seem to include info I don't need or honestly something I don't understand yet (mainly related to defining classinspect maps). If someone could provide a simple example of how to do these in ASDM that would be useful in understanding how regular expressions are properly configured. So here we go.

I know this is basic but I need to make sure I understand this properly - I have a single web server (so this won't be a global policy) where I need to allow access to a specific URL pathfile and that's it. So we'll call it est estfile.doc. Any other access to any other path should be dropped. What's the best way to do this in ASDM (6.4)? I think if I saw a basic example for this I could figure out next few questions but I'll post them as well just in case.

I have another single public web server (again this won't be a global policy) where I'd like to specify blocking file types, like .php, .exe., etc... again a basic example would be great.

Lastly, and this is kind of related, but we have a single office/domain and sometimes we get spam from forged addresses appearing to be from our domain. On Checkpoint I used to use its built-in SMTP security server and could define if it received mail from *@mydomain.com to drop it because we would never receive mail externally from our own domain name. I saw something similar with ESMTP in ASDM and it looks kind of like how you set up the URL access mentioned above. Can I configure this in ASDM as well, and if so how?

View 1 Replies


ADVERTISEMENT

Cisco Firewall :: ASA 5510 - Block Certain Websites (URLs) Using Regular Expressions

Jan 31, 2011

i have cisco asa 5510 as firewall, i was trying to block some site using the link provided below
 
[URL]
 
and its working fine, but the problem i am having, when i go to download attachment from hotmail its not downloading, from gmail and other mails its

View 13 Replies View Related

Cisco Firewall :: 5510 Block URLs Using Regular Expressions For Some Clients

Oct 20, 2012

i use ASA 5510 and i want to block some urls :

-192.168.2.70 to 79 allow every thing
-192.168.2.80  to 89 : block facebook , myspace, twiter,
-192.168.2.90  to 99 : block facebook , myspace, twiter,  youtube , dailymotion
-192.168.2.100 to 199 deny everting

View 1 Replies View Related

Cisco Firewall :: ASA 5505 / Block Website With Regular Expressions Affecting All Internet?

Dec 27, 2011

We have an ASA 5505 and I want to block www.facebook.com for all users on the inside network.  I followed the instructions laid out in Cisco support document ID 100513 using regular expressions with MPF but am running into some problems.
 
[URL]
 
Once the configuration has been changed based on these instruction www.facebook.com is blocked.  However I can't access any other websites except my Google News home page comes up just fine for some reason. 

ASA Version 7.2(3)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password 4nJloDG8uYd8w4D3 encrypted
names
!
interface Vlan1

[code]....

View 18 Replies View Related

AAA/Identity/Nac :: ACS5.3 Command Set Regular Expressions

Jul 9, 2012

I am trying to secure changes to switches using ACS 5.3 and allowing our technicians to only change the vlan for user ports on the switches.  How can I use regular expressions to filter out the 1/1/# ports so that those ports cannot be accessed in config mode?  If I allow the following, it allows access to all interfaces with 'gi' in them.

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - Webfilter Using Regular Expression?

Oct 2, 2012

I have a ASA 5510, it does webfilter using regular expression. [URL]
 
I block ".facebook.com" and it was successfull. But somehow other users is using https to access to FB. how do i filter HTTPS?

View 5 Replies View Related

Cisco Firewall :: ASA 5510 - NAT Regular Translation Creation

Dec 4, 2012

I am having an issue with a specific server that is not reachable from other sub nets. Every other device on the same sub net as the server is reachable via the other sub nets. This server is special because it's NAT'd to an external IP address and has several site-to-site VPN's set up. The firewall is a Cisco ASA 5510.
 
This is the error I see on the ASA syslog when I try to ping the server from another sub net: 3 Dec 05 2012 10:58:49  10.0.15.101 regular translation creation failed for icmp src inside:10.0.20.8 dst inside:10.0.15.101 (type 0, code 0)          
 
The problem server is on sub net 10.0.20.0/24 and the server IP address is 10.0.20.8. Every device on the 10.0.20.0/24 sub net can hit the server, but devices on other sub nets cannot. For instance, a device on 10.0.15.0/24 cannot reach 10.0.20.8, but can reach other devices on 10.0.20.0/24.

View 1 Replies View Related

Cisco Firewall :: Open A Port In ASA 5510 Firewall Using ASDM?

Oct 20, 2012

I would just like to to open UDP port 123 in the ASA 5510 Firewall so that our Primary Domain Controller could use this port to sync time with an external time source. We have already added an access rule for this port under the firewall configuration in ASDM 6.4 and this port was also allowed in the inbound and outbound rule of the PDC's Firewall but it seems that it was still blocked.

View 23 Replies View Related

Cisco Firewall :: 5510 - Cannot Connect To ASA With ASDM Or SSH - Firewall Running Ok

May 21, 2013

I have an ASA 5510 in a live environment. Up til a short while ago I could access this via the ASDM and ssh. However I can no longer connect to it via eithier. When I access It via SSH I get a disclaimer saying the following
 
*** You have entered a restricted zone! Authorized access only!!! Disconnect immediately if you are not authorized user! ***
 
It then cuts me off.
  
When I try to access the ASDM I get the following
 
The firewall is running all its services without a problem and I can ping the device without any issues. Also none of the config (to my knpowledge has been changed). I set up a console session and http server enable is still there with
 
http 192.168.200.0 255.255.255.0 inside

View 4 Replies View Related

Cisco Firewall :: ASA 5510 - Cannot Access Asdm

Oct 5, 2012

Recently powered down device (transformer overhaul) and when it booted back up, unable to access with ASDM, SSH...can access directly using HyperTerm, but have only limited commands...will not accept known user/password credentials. When I issue 'show flash' I can see that there are upgrade_startup_errors.log files, but cannot access them.

View 5 Replies View Related

Cisco Firewall :: Username On ASA 5510 - Cannot Get Into ASDM

May 19, 2013

Customers ASA 5510 and they are using the default "pix" login. I can log into the command line with pix just fine. I created a user account, call it:username jsmith password Passw0rd priv 15,I'm unable to log into the command line with jsmith. I can get into ASDM with it.

View 6 Replies View Related

Cisco Firewall :: Enable ASDM On ASA 5510

Feb 8, 2012

I have just erased an ASA and upgraded the firmware and then added an IP. How can I enable the ASDM as I can't get on it, here is the config: 

ASA Version 8.4(3)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
dns-guard

[code]....

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - Cannot Open ASDM

Mar 20, 2011

We are running a Cisco ASA 5510 in our district.  We have been using it for about a year and a half after an upgrade from our PIX.  I have been using the CLI to manage it but I wanted to start using the ASDM.  I installed the ASDM Launcher last Friday but could not access it.  I have enable the http server on the ASA, assigned an IP to the interface, and granted my machine's IP inside access.  On Friday I was unable to launch the ASDM.  I then downgraded Java.  I came in this morning and was able to connect through the launcher.  However I could not make any changes as it would give me an error message and often popped up with "lost connection" type messages.  I then closed the ASDM but could not reconnect after that.  When I try to connect through the launcher I receive the message "Unable to launch ASDM from 172.16.5.1: Connection reset".  When I try https://172.16.5.1/admin/ from a browser I simply receive "page cannot be displayed".  I'm not sure why I can't connect. 

[Code] ........

View 31 Replies View Related

Cisco Firewall :: ASA 5510 - Graph In ASDM

Aug 28, 2012

Running Asa5510, 8.2.5, with asdm 6.4.5 and I am looking for a graph in asdm that will show me what protocols and internal ip addresses uses the most traffic. Maybe a bit like "Top 10 protected servers under SYN attach". My reason for this is of cause I see a very high traffic pattern from one of my interface during the day and need to identify what is using bandwidth, protocol and source address.
 
I could use Net Flow feature in the Asa, but it´s not "real time" and forces me to setup a net flow collector. Can 8.2.5 not give me this information with built-in graph/tools?

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - ASDM Access From Specific IP

Jan 24, 2013

I do have one other question first.  What's the effect of the crypto key zeroize rsa command, and then crypto key generate rsa modulus 1024 while I'm SSH'd to the ASA?  Can I do it?  Or do i need to be consoled in or connected a different way?
 
ASA 5510:
ASA Version 8.4(1)
asdm image disk0:/asdm-641.bin
asdm history enable
http server enable
http 10.1.1.83 255.255.255.255 inside
http 10.1.1.82 255.255.255.255 inside

Shouldn't that right there be enough to access ASDM from either host .82 or .83?  Because I cannot.  But if I add http 0.0.0.0 0.0.0.0 inside, then I of course can.

View 2 Replies View Related

Cisco Firewall :: ASA 5510 / ASDM Access With Remote VPN

Apr 18, 2012

I have a cisco ASA 5510 that I have set up currently to access via ASDM through the Inside interface. When I VPN in using our older VPN server I can connect to it fine.  I recently set up the ASA to also be a VPN server which will eventually replace the older server for our HQ.  I noticed that when I'm VPN using the ASA as the VPN server, I can only ASDM to the public which I prefer not to allow.  Access to the inside doesn't seem to work this way. What configurations if any would be causing this.  I'm assuming it's some thing I need to adjust in the VPN configuration.

View 3 Replies View Related

Cisco Firewall :: Can No Longer Use ASDM Or SSH To Interface With 5510

Oct 25, 2012

I copied a Cisco 5510 startup-config to an identical Cisco 5510.After copying through tftp, I executed a reload.  Everything looks good. Line by line  compare results are the same.The problem is I can no longer use ASDM or ssh to interface with Cisco 5510.

View 25 Replies View Related

Cisco Firewall :: Cannot Connect To ASA 5510 With ASDM On Linux

Oct 1, 2012

I was able to connect to my ASA 5510 with a browser, install ASDM, and  configure my ASA 5510 with my Windows 7 laptop. Since I needed the laptop for another task, I am now trying to  connect using a Linux laptop to do the same, but without success.
 
I can ssh into the firewall using the management port (192.168.1.1)  from the Linux command line. However, I cannot connect using a browswer (192.168.1.1) to install ASDM.

View 2 Replies View Related

Cisco Firewall :: Unable To Login Through ASDM At ASA 5510

Jul 6, 2011

When i tried to login through ASDM at Cisco ASA 5510, it ask for the username and password and after that nothing comes up. I am able to login through ssh. [code]

As per my knowledge show bootvar and show version, should shows the same IOS version. But here it's showing different. Is asdm-523 is compatible with IOS asa708.

View 6 Replies View Related

Cisco Firewall :: ASA 5510 - Account Using ASDM Read Only

Aug 25, 2011

Is there a way to create an account for the ASA using ASDM that is only read only and cannot make firewall changes?

View 1 Replies View Related

Cisco Firewall :: Unable To Download ASDM Launcher From ASA 5510

Jun 16, 2011

i have an issue with ASA 5510.
 
I connect to the device - https:/interface
 
I see the options such as download launcher etc.
 
But.. whenever I click on this I get stuck
 
Internet Explorer gives "page not found"
 
Or at the foot of the page it says "unable to download statup_lr"
 
Firefox says cannot connect
  
It is running 6.2.5.53
 
I can connect if I go to a PC where I have already downloaded the ASDM launcher (from many years ago)
 
Tried Win 2003, 2008 and Vista, and Windows 7
 
Tried downgrading to Java 6 r 7. Can I download the launcher from the Cisco website rather than the device? If so where?

View 2 Replies View Related

Cisco Firewall :: 5510 - ASDM Shows Only One Context After Reboot

Sep 16, 2012

On our ASA 5510 we have two security contexts. After opening ASDM I can see and manage admin context, but cannot see second context. I can do changes to second context via CLI but as probably you know it's easier and quicker doing it via ASDM.

View 7 Replies View Related

Cisco Firewall :: 5510 Block HTTPS Website Using CLI Or ASDM

May 17, 2013

I have purchased a Cisco ASA 5510 & want to block all social networking websites (https) either using CLI or ASDM.

View 1 Replies View Related

Cisco Firewall :: No ASDM SSH Access To Inside Int Across L2L Tunnel In Asa 5510

Jul 19, 2011

So I've run into a problem on my ASA5510, post-upgrade I can no longer connect to the inside interface from across our L2L VPN. I've tried both ASDM and SSH and the connections fail. I see in the logs that the attempt is being made, but it will eventually time out. There have been no problems with this type of connection with any previous upgrades, just this particular upgrade, I went from 8.4(1) to 8.4(2). I don't see much in the release notes or anything in a pre/post config diff that jumps out as a cause to this behavior. The only thing I did see in the release notes "CSCtg50770 Mngt-access (ASDM,SSH) to inside intf of 5580 fails over RA VPN session" which sounds like it could be my problem, but that was in the "Fixed in 8.4(2)" section and says it's for a 5580, maybe the fix for the 5580 broke it on a 5510??? I hope not and that I'm simply missing some new setting that I need to enable for this type of connection as this device is in a remote office.

View 2 Replies View Related

Cisco Firewall :: ASA 5510 Asdm Launcher Freezes After Username / Password

May 13, 2011

The  ASA 5510 is working with asa8.3.1 and asdm 6.3.1. ( with factory default config )i ve upgraded to  asa8.4.1 and asdm 6.4.1.Now the asdm launcher is frozen after username/password. The asdm upload the software and write that "software update completed".After it the hour glass or sand-glass is visible over the asdm window.

View 2 Replies View Related

Cisco Firewall :: Asa 5510 / Unable To Launch And Access HTTPS To Run ASDM

Jan 17, 2013

i am unable to launch ASDM, and access https:// to run Asdm..everything worked find yesterday but now for some reason it wont work?When i am trying to log in with the asdm it just hangs on the connecting to device... please wait...When i am tryng access the https://... i get the ssl do you want to trust.. and i press proceed anyway and i get an error
 
Asa 5510
Device manager version 6.1
System image file is "disk0:/asa804-k8.bin
 
Also i am accessing the asa with ssh without any issues

View 10 Replies View Related

Cisco Firewall :: ASA 5510 ASDM Show Log On Access-list Empty

Mar 14, 2013

I created some acess-lists, and you can assign a logging level to this access-list. Now this ACL has a lot of hits, so i want to see whats happening. Only the log I then see is completely empty. I cannot figure out how to get some info in that log.
  
I think there is some global logging setting i probably need to enable in order to get anything logged at all, but i cannot figure out which.

View 4 Replies View Related

Cisco Firewall :: Blocking Outbound Port 80 Traffic Using ASDM On ASA 5510

Nov 26, 2012

I am attempting to block outbound traffic for a specific PC on my LAN using the ASDM.

View 2 Replies View Related

Cisco Firewall :: Disable Admin / ASDM Access Only On Public Interface Of 5510

Oct 12, 2011

how to totaly disable Admin/ASDM access on our public interface of our 5510.  I don't want to change IPSec or SSL access to the outside interface.  Just totaly disable access to Admin/ASDM from the outside without halting all other access.

View 3 Replies View Related

Cisco Firewall :: ASA 5510 Running 8.3(1) And ASDM 6.4(5) - Real Time Log Viewer Delay / Slow

Feb 15, 2012

I have a new ASA 5510 running 8.3(1) and ASDM 6.4(5)
 
I am trying to use the real time log viewer to troubleshoot some access issues, but I am getting delays of up to 30 seconds or more between my client connecting to the ASA and the corresponding events showing in the RT Log viewer. I am using a simple filter  for source IP as it's quite a busy device.
 
I've seen an article that says to turn off certain logging IDs (such as 304001 from memory) which I have done, but no different.

View 6 Replies View Related

Cisco Firewall :: ASA 5520 With 8.04 And ASDM 6.1(5) Global Not Showing In ASDM

Apr 26, 2011

nat global entry not showing up in ASDM but it does via CLI see blow, it's a policy NAT.
 
nat (inside) 5 access-list inside_nat_outbound_4
 
global (outside) 5 ************-OUTSIDE netmask 255.0.0.0
  
Global 5 doesnt show in ASDM 6.1 (5) the globals only go up to 3

View 1 Replies View Related

Cisco Firewall :: Regular Dynamic PAT Statements In ASA 8.3?

Feb 19, 2012

have 2 inside networks:
 
object network INSIDE_10.6
subnet 10.6.0.0 255.255.0.0 
object network INSIDE_192.168
subnet 192.168.0.0 255.255.255.0
 
I grouped these 2 into 1 object-group:
 
object-group network INSIDE
network-object object INSIDE_10.6
network-object object INSIDE_192.168
  
Public IP address used for PAT:
 
object network PAT
host 152.x.x.x
 
I used the following statement to create Dynamic PAT to public IP address:
 
object network INSIDE_10.6
nat (any,any) dynamic PAT
object network INSIDE_192.168
nat (any,any) dynamic PAT   
 
Is that correct? Also I'm using one public address to PAT both inside networks. Is there any dvantage of using 2 different ones, so each inside network would be PAT to its own address?

View 1 Replies View Related

Cisco Firewall :: Pix 525 Configuration - Regular Or Redundant Interface

Feb 14, 2012

I am configuring a pix 525,i just found out how to activate the subinterface on it so that's good,the box has a primary unit and secondary unit, both are connected from G0 to redundant switches,if i do a show failover, it says it's using the serial based lan failover, which is fine by me,however, do i need to create a single, regular interface.. or a redundant interface?,i.e. if i create a regular subinterface, will failover still apply to this interface?,or for failover to work, do i need to create a redundant interface (with a redundant id)? i do not seem to have the option to create a subinterface when adding a redundant interface.

View 7 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved