Questions tagged [cisco-asa]

The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality.

The Cisco ASA (Adaptive Security Appliance) series of products provide Firewall and VPN functionality as standard. This is Cisco's replacement line for the PIX range, but has additional functionality, mostly related to security, through additional modules.

772 questions
3
votes
3 answers

Using Cisco ASDM to change internal IP address of 5505

I'm trying to set up a new 5505 for the first time. I am not a network admin, so I'm using the graphical tool that comes with it, ASDM. One of the things I am trying to do is change the subnet used by the "internal" network to 10.0.0.x. In the…
brooks94
  • 167
  • 2
  • 5
3
votes
6 answers

ASA 5505 Unable to launch device manager

I've seen similar errors posted but I think mine is a little different. I'm new to Cisco, and was given an ASA 5505 to configure. I intended to do a factory reset, but ended up running an erase, which of course wiped everything out. I've worked…
Shawn
  • 31
  • 1
  • 1
  • 2
3
votes
1 answer

Can I enable NAT on a Cisco ASA without breaking connectivity?

Sorry for the noob question, I haven't done this in years... I have a Cisco ASA with a working VPN, which I set up like five years ago, and I would like to forward http through to an internal IP address. The concern is: the only way I have to get to…
Josh
  • 337
  • 2
  • 10
3
votes
1 answer

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I can ping/access remote-office (192.168.200.0/24)…
morleyc
  • 1,150
  • 13
  • 47
  • 89
3
votes
1 answer

What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls

Have quite a few questions for Implementing Radius for my network devices : How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius fails. How to provide only read access for few users…
gHP
  • 39
  • 2
3
votes
2 answers

Cisco ASA Port Forwarding for Newbies

I'm a contractor for a private school where I'm tasked with developing a public API to their database to use in mobile apps. They host their own website on school premises and their network is controlled by a Cisco ASA 5510 running CLI 8.2. They are…
pmwood
  • 133
  • 4
3
votes
2 answers

Cisco ASA blocking traffic from DNS server

I have a client who has a Cisco ASA 5505 device. I am not familiar with these devices at all. The client has a problem where it allows outbound from traffic from an old DNS server (10.236.72.100), but not from a new DNS server (10.236.72.3). I…
Ash
  • 485
  • 9
  • 18
  • 28
3
votes
2 answers

Cisco ASA Latency

What is the typical latency added when using a Cisco firewall such as ASA 5505? Are we talking less than 50 microseconds?
DD.
  • 3,114
  • 11
  • 35
  • 50
3
votes
1 answer

How to put my ASA 5505 into single router mode so I can restore factory defaults?

I'm trying to restore an ASA 5505 to the factory defaults. According to the instructions from several sources (e.g. http://www.mailbeyond.com/restoring-factory-defaults-to-the-cisco-asa5505-firewall-via-the-console) I need to run the following…
RobB
  • 33
  • 1
  • 3
3
votes
2 answers

Initial Cisco ASA 5510 Config

I'm trying to set up a new ASA 5510. I have a pretty simple set up with one /24 on the inside NATed to a DHCP address on the outside. Everything on the inside works and I can ping the outside interface from external devices. No matter what I do I…
3
votes
1 answer

Cisco ASA Routing, Hairpin?

Cisco ASA 5505, 8.4.3 LAN: 10.0.15.0, Security Level 100 WIRELESS: 10.0.17.0, Security Level 75 WAN: Security Level 0 From the WIRELESS interface I need to access servers on the LAN. The problem is WIRELESS traffic heads out on WAN1 and does not…
nick
  • 31
  • 2
3
votes
4 answers

Cisco ASA - Multiple Public Subnets

I have an existing Cisco ASA 5520 configured with a /28 subnet on the outside interface. My hosting provider just provided me with a new non-adjacent /28 subnet which is routed to the outside interface on my ASA. Here is the current IP…
ScottAdair
  • 141
  • 2
  • 9
3
votes
1 answer

Backup ISP connection with ASA 5505 and Primary ISP is a DHCP address

We're using a 5505 where the primary connection is a DHCP IP (outside) from the provider and we have a backup ISP with a static IP (outsideBackup). Can we create an SLA Monitor on the outside interface, even though there is no set gateway (say to…
eric.s
  • 429
  • 1
  • 3
  • 12
3
votes
3 answers

How to monitor the port state on ASA 5505

On a Cisco router when you unplug a cable from an interface I normal see debug "int fa0/3 line up" etc Is there some command to see this on an ASA 5505? I'm SSH'ing into it, do I need to use console to see this output? I have a device and the port…
Coops
  • 31
  • 1
  • 2
3
votes
1 answer

Traffic blocked between VLANs despite security-level difference on ASA 5510

I have an Cisco ASA 5510 configured thus: interface Ethernet0/0 description ### Trunk for inside, wlan ### speed 1000 no nameif no security-level no ip address interface Ethernet0/0.10 description ### OFFICE ### vlan 10 nameif inside …
Bittrance
  • 3,070
  • 3
  • 24
  • 27