Questions tagged [asa]

Cisco ASA (Adaptive Security Appliance) is a family of security products from Cisco Systems. For Sybase ASA, use the [sybase-asa] tag.

Cisco ASA (Adaptive Security Appliance) is a family of security products from Cisco Systems. For Sybase ASA, use the tag.

50 questions
0
votes
2 answers

how i can extract ip source; ip destination ; port source using logstash filter?

I'm using logstash to collect logs from my ASA 5505 and i want to extract ip source; ip destination; port source; port destination to use them in kibana. What i should write in the filter. This is a sample log message: <166>Aug 20 2014 05:51:34:…
0
votes
1 answer

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection from MAC OS X (preferrably built in IPSec client) to…
ghastly_kitten
  • 135
  • 2
  • 9
-1
votes
1 answer

Logging of Access control entry in Firewall

We have a Cisco ASA5520 firewall, Access Rules are defined for each interface. Explicit deny all command is not specified on the interface. Logging is enabled on the firewall. My question is, When an IP address other than the allowed ip address…
Vinod K
  • 1,885
  • 11
  • 35
  • 45
-1
votes
1 answer

Not getting expected throughput on Cisco ASA 5506-X

I have a Cisco ASA 5506-X running version 9.9(2). I recently upgraded my internet to gigabit speeds (in reality about 750 - 850 Mbps). However, my ASA was only allowing throughput of about 200Mbps. I thought that the ASA would allow throughput up to…
BashfulCoder
  • 152
  • 1
  • 1
  • 7
-1
votes
2 answers

Paramiko not receiving all data from Channel

I've done a script to configure a couple of ASA devices. It does the job perfectly BUT I can't get the whole output from the devices I'm configuring, at some point the data gets stucked and there's no more output. I want to have that in order to…
Lucho
  • 1
  • 1
-1
votes
1 answer

Cisco ASA DAP rule and LDAP.memberOf attribute is not recognized

I am in charge of setting up a Cisco ASA 5xxx firewall with an OpenLDAP server for authentication in VPN. Everything is working fine so far. However, I am trying to check the "memberOf" property of the user to assess if he is able to connect to a…
leo
  • 19
  • 1
  • 5
-1
votes
1 answer

Can't ping through IPsec

I have configured IPsec using asdm site-to-site VPN wizard. Based on "show crypto isakmp sa" and "show ipsec sa" the tunnel seems to be up and fine. However pinging from one site to the other doesn't work. show crypto isakmp sa: ''' There are no…
sass
  • 1
-1
votes
2 answers

Unsupported parameters for (cisco.asa.asa_command) module: context, passwords found in provider

I am trying to send a 'show version' command to my Cisco ASA using Ansible, but I am encountering the following errors and I don't know why. The same thing works for my Cisco router though. Below are some details that might be helpful. Cisco Asa…
Mervin Hemaraju
  • 1,921
  • 2
  • 22
  • 71
-1
votes
1 answer

Cisco ASA IPsec tunnel disconnect sending RST to all hosts

This is very strange behavior we are observing with our IPsec tunnel, we have two sites connected with cisco ASA using site-to-site VPN tunnel as per following: [LAN-1]---------[ASA-1]-------Internet-------[ASA-2]--------[LAN-2] We have Jenkin…
Satish
  • 16,544
  • 29
  • 93
  • 149
-1
votes
1 answer

Visual Studio 2017 - stream analytics projects local run fails

I am prototyping an ASA job with Visual Studio 2017. I have created input and outputs and a ASA query. This is the query, which I want to test. The query runs successfully in a productive environment and I wanted to test different input…
-1
votes
1 answer

get content in between a matched pattern and next matched pattern using python

I am trying to write a python script to export text formated cisco firewall configuration file to excel for easy query and filtering. I am able to write acls and each fields into excel sheet tab. however for network objects I have a little…
Feng
  • 41
  • 7
-1
votes
1 answer

Can CISCO ASA hot standby if their firmware version is different?

I have a pair of Active/Standby ASA need to upgrade from 9.1.5 to 9.1.7. I am going to upgrade the Standby unit first and then force it to become active. In case of any unpredictable problem on version 9.1.7. I want to wait for a week before…
Sean Out
  • 57
  • 9
-1
votes
1 answer

AWS VPC - Force EC2 to EC2 (ASAv) routing

I am trying to force traffic from an EC2 instance to a Cisco ASAv within my VPC but having difficulty in every which way I try. My setup is as follows; PRIVATE SUBET > ASAv > PUBLIC SUBNET > AWS IGW 2 custom route tables; 1 for public which uses…
-1
votes
1 answer

Default URL of Cisco ASA 5505 not displaying login page

We have a Cisco ASA 5505 firewall device and I need to try and do some configuration on it remotely but upon navigating to the suggested URL of https://192.168.1.1/admin nothing is being displayed. Any ideas of how I can find what the IP of the…
Jay
  • 3,012
  • 14
  • 48
  • 99
-2
votes
1 answer

ASA configuration using packet tracer

I an trying to configure below network. I am not able to open http://142.12.56.68 from public laptop. I am able to ping to firewall 192.158.99.1 from VLAN20 laptop0. I have below configurations on asa and multi switch. Please let me know what else I…
linda
  • 5
  • 4