Cisco Firewall :: Way To Check Hardware Status Of ASA 5505?
Nov 22, 2012Is there a way to check the hardware status of an ASA 5505 ? I am thinking of a command or a script to execute.
View 3 Replies
ADVERTISEMENT
Cisco WAN :: To Check Status Of VPN 1841
Dec 15, 2010i have a router 1841 series and LMS send me amessage telling me the VPN AIM is not working on thsi device and i want to check the status of this VPN card
View 1 Replies View RelatedCisco Firewall :: ASA 5505 Yellow Status Light
Nov 27, 2011Does a ASA5505 have a limited lifetime warranty? I have a ASA that is not covered on a SmartNet contract, as far as I know of, it is not owned by my company. It has a yellow status light, and will not boot. Will cisco replace it?
View 1 Replies View RelatedCisco Firewall :: Solid Amber Status Light On ASA 5505?
Apr 14, 2010I have a Problem with a ASA 5505 when i power on the ASA the Power LED change to green and the Status light to solid amber. There is no Console output or anything else.
View 9 Replies View RelatedCisco Firewall :: Solid Amber Status Light On ASA 5505 Under SmartNet
Oct 14, 2011I have an ASA 5505 with status light solid amber color. It is under SmartNet.I'd like to know Cisco will replaced this device with new ASA5505 or upgrade one?
View 2 Replies View RelatedCisco WAN :: Check ASA 5505 Port Forwarding Configuration
Apr 23, 2012I've configured port forwarding on an ASA 5505 to connect to an Access Point web administration.This Is for testing purposes only. I've followed the guidelines for port forwarding and I've created an access list but I can't connect to the AP.I know It's working because It connects fine when connected to my speedtouch router.I've attached a running-config.I'm getting hit counts on the ACL and I'm getting untranslate_hits on the nat but no translate hits.
interface Vlan1
nameif inside
security-level 100
ip address 10.0.0.1 255.255.255.0
!
[code]......
Cisco Firewall :: NAT RPF Check Failure PIX 8.2 OS
May 2, 2013i know in Cisco PIX til 8.2 OS, if i have Nat control disabled and ACL permitting connection from Low Secirity ( DMZ ) to High Secuurity (INSIDE) then connectino should be successful, and i dont need any STATIC identity nat of inside IP to be created.
But i have Cisco PIX 525 with Version 7.2(2) Which is not allowing connection from DMZ to INSIDE , although nat control is disabled. and giving RFP check failure, any thought?
PIT525PIXINET# sh running-config nat-control no nat-cont
packet-tracer input dmZ tcp 192.168.85.4 65000 10.34.21.25 3389
Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
[Code]...
Cisco :: Software To Check Most Used Website Through Firewall
Mar 1, 2012know software that can show us software that shows most used websites through particular firewall?
View 8 Replies View RelatedCisco Firewall :: ASA 8.2(5) / UDP Reverse Path Check
Jun 15, 2012ASA running 8.2(5).When I enable ip spoofing on my network interfaces I see this getting logged:
Deny UDP reverse path check from 10.100.100.102 to 10.100.100.255 on interface SPECTRA-LAN
This is because interface SPECTRA-LAN (VLAN50) is the interface connected to the network with ip 10.100.100.0/24 but the interface do not have a ip address so it does not exist in the routing table I believe?However interface INTERN do also belong to network 10.100.100.0/24 which also is the management interface and the default route for hosts in network 10.100.100.0/24, but has no vlan.
1. move the management0/0 to SPECTRA-LAN and give SPECTRA-LAN ip 10.100.100.1?
2. give SPECTRA-LAN a ip address in the 10.100.100.0 range?
My routing table and interface list is:
Current available interface(s):
DATA-BACKUP Name of interface Redundant1.10
DMZ Name of interface Redundant1.900
GUEST Name of interface Redundant1.990
HOSTING Name of interface Redundant1.100
Infrastruktur Name of interface Redundant1.20
[code]....
Cisco Firewall :: ASA 8.4.3 - Does It Check DNS Source IP Address
Oct 29, 2012Does ASA 8.4.3 check the source IP address of a DNS reply and drop it if the reply address is different to that in the query?
Customers DNS server does this due to a recent change, their server now has a virtual address, but replies are sent from its physcial address. This is temporary. Their PIX is happy with this.
Replace the PIX with the ASA, DNS fails, the only reason I can see is due to the way their internal DNS operates.
Cisco Firewall :: 5520 - How To Check Hits On Particular Allowed IP
Aug 10, 2011i allowed one of internal ip using static nat and public ip is 203.18.137.22 and i want to check which IP are hit this public ip ?Is there is any command to check which ip is hitting 203.18.137.22? I have the cisco 5520 asa firewall.
View 6 Replies View RelatedCisco Firewall :: 5520 - How To Check Vulnerability On ASA IOS Image
Feb 28, 2012i am using asa821-k8.bin image, in my cisco 5520, How can i check if my IOS is vulnerable ?
View 4 Replies View RelatedCisco Firewall :: ASA 5520 - Check Which IPs Hitting On Particular Interface
Sep 23, 2012I have a cisco asa 5520 and suddendley in my Network Monitor tool,(using SNMP) asa's DMZ interface traffic is showing arround 90000 Kbit/s .
i want to check which traffic is flowing throgh this interface.(Ip address details)
Note : There is no impact on asa CPU usage.
Cisco Firewall :: 5520 ASA To Monitor The Ha Status
Apr 15, 2012We have a Cisco ASA 5520 in HA (Active - Standby). We monitor the CPU,Memory Utilization and Active Session via SNMP polling.And SNMP trap for linkup ,linkdown and Cold start.Our requirement is to monitor the HA status and whenever there is a change in the HA - Failover we have to get a snmp trap.What are the configuration need to be done on the cisco asa.
View 3 Replies View RelatedCisco Firewall :: How To Check Functions Included For ASA Image NCI-ASA5520-BUN-K9
Jan 13, 2013May I have to know how to check functions included for asa image NCI-ASA5520-BUN-K9?
View 2 Replies View RelatedCisco Firewall :: Command To Check ASA 5520 Is Passing Traffic
May 14, 2012how can i check that ASA is passing traffic? Also what command we can use to make sure VPN is working fine.
View 2 Replies View RelatedCisco Firewall :: Command To Check IPSEC Tunnel On ASA 5520?
Jan 7, 2013Need to check how many tunnels IPSEC are running over ASA 5520.Tried commands which we use on Routers no luck?
View 6 Replies View RelatedCisco Firewall :: 12697 FWSM Shows TCP Check-sum Incorrect
Jun 13, 2012When we setup a connection between two hosts we receive the message "TCP checksum incorrect" , This is between a settop box on the outside and a server inside the firewall. This STB used to communicate with the server on port 443 which is NAT-en to port 12697.With a new settop box image which uses on the inside and outside port 12697 we receive this TCP checksum incorrect on the Firewall with wireshark.
Strange is that on the outside of the firewall we see an MSS of 1460 and on the inside it is 1380 (don't know if there is a relation with this and the issue we have)
Cisco Firewall :: ASA 8.4 Newer Check Point Conversion Tool?
Feb 8, 2012Is there a newer tool for current versions of Checkpoint to ASA 8.4? I notice a lot of similarity between checkpoint and 8.4 now, but I still have to do it all line by line which has become a PITA.
View 1 Replies View RelatedCisco Infrastructure :: Where To Check License Details - ASR 1000 Firewall
Mar 13, 2011I am looking for for details meaning of license because I cannot found the details install. The license call
FLASR1-FW-RTU(=)
that is used to enable the firewall function in ASR 1000 series. But I don't clear about what feature inside, it is because it only show the "firewall" from website. Is that same as IOS firewall?
Cisco Firewall :: Can't Access PIX 535 Console (in Failover Standby Status)
Jun 14, 2011we have two pix535 one is ur other is FO license.
once a time i found can't access FO pix535 console, i'm sure console cable is ok. when i unplug failover serial cable from FO pix535, i can access pix 535 console.
Cisco Routers :: RVS4000 - Switch Status Of IPS Function / Firewall Rules Don't Work
May 3, 2012I have problem with RVS4000 fw 1.3.3.5. When you switch the status of IPS function (turn on or turn off), firewall rules don´t work from that moment until you restart the router!
View 2 Replies View RelatedCisco Firewall :: Monitoring ASA 5505 Firewall Active / Standby Pair Using SNMP?
Sep 7, 2011How I can actively monitor the interfaces and overall status of 2 x ASA 5500s in an Active/Standby configuration?
I can setup monitoring of the interfaces on the Active member but I'm not sure how to manage the Standby member?
Cisco Firewall :: IOS Firewall Versus ASA (5505 / 5510) For Smaller Clients (less Than 50)?
Apr 24, 2012We were having a discussion of ios firewall vs. asa for smaller clients(less than 50). On using ios firewall(zbf or cbac)and an asa 5505/5510. One of the arguments brought up on using ios firewall on the router is that a router will do an ip sla failover. I have configured a number of isr's for this and i know it works good.
View 1 Replies View RelatedCisco Firewall :: Failover ASA 5505 - Setup Second Inside Interface On Firewall?
Feb 19, 2012I have a Cisco ASA 5505 in our office. We are currently using Interface 0 for outside and 1 for inside. We only have 1 Vlan in our environment. We have two three switches behind the firewall. Today the uplink to Interface 1, to the firewall, on the switch went bad. I want to setup a second inside interface on the firewall and configure it as failover incase this happens again. I want to attach it to the other switch. Can I do this? If so, what do I need to do? would it only be a passive/standby interface?
View 1 Replies View RelatedCisco Firewall :: Setting Up ASA 5505 To Be Used As Firewall Between BT Internet And 3560 LAN Switch?
Aug 23, 2011setting up an ASA 5505 to be used as a firewall between a BT internet router(BTNet service) and a Cisco 3560 Lan switch. BT have presented me with a cisco 3800 series router with the following details:
Network Address Network Mask BTnet NTE Router LAN Address
There are 2 Gigethernet ports on the back of the router port Ge0/0 is connected to the BT NTE and the status light is flashing green. Int ge0/1 is connected into port int e0/1 of the ASA but i am unable to get any connection.
Cisco Firewall :: Upgrade From 5505 To 5520 On Network - ASA Firewall Throughput
Feb 27, 2013I'd like to see some REAL LIFE comparisons of ASA firewall throughput (a bit like this one for ISR G2 Routers - [URL].
The reason I ask is that I recently upgraded a firewall from an ASA5505 to an ASA5520 on a small network where the only outside connectivity was a single 10meg Internet circuit with an IPSEC VPN (not landed on the firewall but on a router) to another site.
When I swapped out the firewall the users noticed a big improvement. The firewall is not doing anything out of the ordinary - no IPS or VPN, just standard state full inspection.
Cisco Firewall :: 5505 - Setting Transparent Firewall Ip Address?
Dec 22, 2011Trying to set up a asa 5505 in transparent firewall mode. I cannot set the management ip address:
ciscoasa> enable
Password:
ciscoasa# config term
[Code].....
Cisco Firewall :: ASA 5505 Creating Interface Vlan In Firewall
May 3, 2011I have been working with ASA 5510,20,40,80 but not with 5505 this vlan and its interfaces are quite confusing.Just want to know how it works and its connectivity to Cisco Switch.Do i have to put the interface of the switch in the same vlan as i am creating the interface vlan in firewall ?Now the switch port connecting to this Eth1 interface should also be in the same vlan ? i.e vlan3 ?? or it will be in trunk ? The default configuration shows the eth0 with no access vlan and interface eth1 with access vlan 2... does it mean the eth0 is in vlan1 ? (Nativ Vlan ) ???
View 4 Replies View RelatedCisco Firewall :: ASA 5505 Firewall To Filter HTTPS Websites?
May 28, 2012I have a cisco asa 5505 firewall. Is it possible to block secure websites in it like [URL]? I have already tried regular expression filtering but it filters only http traffic.
View 4 Replies View RelatedCisco Firewall :: ASA 5505 - Can't Reach FTP Site While Inside Firewall?
Feb 26, 2011I am trying to configure our ASA 5505 so that our users can access our ftp site using [URL] while inside the firewall. Our ftp site is setup so that you can reach it by either browsing to the above url or by browsing to ftp://99.23.119.78 but we are unable to access our ftp site from either route while inside the firewall. We can access our ftp site using the internal ip address of 192.168.1.3.
Here is our current confguration:
Result of the command: "show running-config"
: Saved:ASA Version 8.2(1) !hostname ciscoasaenable password qVQaNBP31RadYDLM encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface Vlan1nameif insidesecurity-level 100ip address 192.168.1.1 255.255.255.0 !interface Vlan2nameif ATTsecurity-level 0pppoe client vpdn group ATTip address pppoe setroute !interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5!interface Ethernet0/6!interface Ethernet0/7!ftp mode passiveobject-group service DM_INLINE_TCP_1 tcpport-object eq ftpport-object eq ftp-dataport-object eq wwwaccess-list ATT_access_in extended permit tcp any host 99.23.119.78 object-group DM_INLINE_TCP_1 access-list ATT_access_in extended permit tcp any interface ATT eq ftp access-list ATT_access_in extended permit tcp any interface ATT eq ftp-data access-list ATT_access_in extended permit tcp any interface ATT eq www access-list 100 extended permit tcp any interface ATT eq ftp
[code]....
Cisco Firewall :: 5505 PAT With Single Public IP And Several Servers Behind Firewall
Nov 21, 2012New to the ASA 5505 8.4 software version, but here is what I'm trying to do:
-Single static public IP: 16.2.3.4
-Need to PAT several ports to three separate servers behind firewall
-One server houses email, pptp server, ftp server and web services: 10.1.20.91
-One server houses drac management (port 445): 10.1.20.92
-One server is the IP phone server using a range of ports: 10.1.20.156
Basically, need to PAT the ports associated with each server to the respective servers behind the ASA 5505. Is anything missing from this config? Do I need to include a global policy for PPTP and SMTP? [code]
Cisco Firewall :: ASA 5505 Transparent Firewall With Web Sense Integration
Apr 27, 2011I'm integrating a Cisco ASA5505 with a Websense proxy. I have a configuration setup where we have four routers which are used for Internet access. There are two VLAN's - Guest and Private. What I would like to achieve is making the use of available bandwidth by load distribution via GLBP, and filtering users web traffic. Two routers will be used for a GLBP group in one VLAN, and the other two routers will be used for GLBP in another VLAN.The users are connected to a Cisco 2960 switch and are in their respective VLAN's. I'm planning a 802.1q trunk to a Cisco ASA from the 2960 switch, carrying both VLAN's.What I would like to know is if there is a CSC module (or similar) which has Websense installed on it, and if it is possible to setup the ASA5505 in transparent mode to filter the traffic in this way? Hopefully this would allow multiple users to take advantage of the additional bandwidth, and not be restricted by using a traditional proxy setup which where all web traffic would be originating from a single MAC address.
View 1 Replies View Related
