Hello,I'm on an ASA and have to amend an access list, but is says the source group is "object-group network DM_INLINE_NETWORK_72" what is this and how can I see what IP's are included in it?Thanks
Hello Experts,I have 2 question for FWSM, and i hope i will get answers from you'lli created interface vlan 100 on FWSM and enable telnet for that interface i was not able to telnet, but when i created another interface interface vlan 200 then only i...
I have ASA that just started to reboot through out the day yesterday. It seems to happen every few hours but not in a pattern.Right before it reboots there is a flood of sys log id 305006 messages "portmap translation creation failed for tcp src insi...
Hi,I have been asked to create an inbound connection on the ASA from the internet to a part of the network that is accessible over the Wide area network egInternet address 94.175.x.100 goes to 151.5.3.100,The internal network is 10.42.15.0/22, and c...
Hi All, I have a rule in place on the DMZ interface to allow all traffic through from 192.168.203.14 to anywhere; I get the message below but not sure what it means, please advice if you know:Feb 24 2012 10:39:44: %ASA-6-106100: access-list ACL_DMZ_I...
Hello Community;When users are VPN connected their telnet sessions timeout after an hour of inactivity. Looking at the connections on the firewall they are showing as idle. Is there a configuration change or something else that has to be modified?Any...
Hi,in the FWSM we have too many "deny tcp (no connection)" log and tcp connections disconnect randomly. some log events:Deny TCP (no connection) from 10.4.2.1/80 to 10.5.46.2/1395 flags ACK on interface inside.
HiI have upgraded ASA5510 256MB to 1G RAM.After one day of working, ASA stop responding.I reload the ASA, but nothing came on.The LEDs arePower GREEN, Status AMBER, Active AMBER, VPN GREEN, Flash OFF.Any suggestionsThanks
Please assist in a design problem we have iminent. I need to replace an ASA with an IOS firewall router, and am not sure how to migrate the NAT configuration. Specifically, there is an interface "3rdparty" that has onward connectivity to other priv...
Hi, Should be a simple one this, but damned if I can work it out!I've TFTP'd a config from a PIX and modified it for use with an ASA 5510. On startup I get:WARNING: conflicting statics in startup configuration*** Output from config line 1021, "static...
We are trying to upgrade from 8.2 to 8.3 (or beyond) and want to know if with the changes to NAT do we need to convert all of our NAT rules for access from the DMZ to the internal network. We have some static NAT statements for both single IP's and s...
Hello i try to recover cisco ASA 5505 IOS in Rommonmode but i have this message :rommon #0> ADDRESS=10.0.0.1rommon #1> SERVER=10.0.0.2rommon #2> GATEWAY=10.0.0.10rommon #3> IMAGE=asa824-k8.binrommon #4> PORT=Ethernet0/0Invalid PORT name argument, Va...
Ive been trying to find a few guides to setup this box but none seem to work entirely:http://www.youtube.com/watch?v=CByWWdC2Deo&feature=relatedanother:http://www.dslreports.com/faq/15785So im setting up a Pix 525 for testing and im having a few issu...
I have upgraded ASA5550 version from 7.2(4) to 8.4(2).On version 7, I am used to "names" command, like this:namesname 107.25.1.10 Picardname 107.25.2.20 AdministrativaBy addition, when configuring acls it was very usefull, for example:access-list ins...
