I'm trying to troubleshoot some Avaya H323 issues and one of the solutions was to disable inspection for h323:
policy-map global_policy
class inspection_default
no inspect h323 h225
no inspect h323 ras
What I need to know is whether or not ...
An attempt to install a version of the Geolocation Database (GeoDB) that is already installed returns the following error: Failed to install Geolocation Update. Please contact Sourcefire support.
Hi Everyone, Need some help from expert who familiar with ASA-IPS. Currently i have implemented ASA-IPS. I have set that the IPS address as my management ip range. But somehow, i found that my management ip range are not permitted to internet. Is tha...
HiAny Idea why the hitcounter display output on csm 4.5 is so slow or sometimes does not work ?very often I have to reduce the numbers of rules to see any hitcounts at all sincerleyAlfred
Hi all,In my firewall ASA 5540,Every day I am getting the syslog message. 4Jul 07 201408:57:39 [ Scanning] drop rate-2 exceeded. Current burst rate is 0 per second, max configured rate is 8; Current average rate is 7 per second, max configured ra...
asacx-sys-9.3.1.1-112.pkg why required on ASA X series If i upload this file can i get http access on asa cx on over ASA dont have asacx-sys-9.3.1.1-112.pkg.If i try to upload file to ASA getting insufficient place on flash if i given sh flash it i...
Hello Fellow Mates,One of my client has a fingerprint device configured in his environment. There is the internet router then there is the switch and then some pcs and the device connected. All are accessible through their headoffice as well, but now...
I am configuring an ASA5505. I need to have accesso from outside to inside. Someone can help?. Here's the configuration : Saved:ASA Version 8.2(5)!hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!inter...
I see in my history that I had a similar problems a while back, unfortunately I had to nuke the setup and so I am sort of start of from the start again.I have two servers set up in DMZ, one FTP and one WWWFTP = 192.168.2.101WWW = 192.168.2.100Outside...
We have configured ASA Active standby failover with ASA5505 . When primary unit power off, secondary unit became active. when primary unit power on, then primary unit is becoming active again. i think for active standby setup there is no preemption. ...
Hi All, From What I have learnt regarding access lists, if there is a global access list, it will be checked after checking the interface access list and the "deny ip any any" will be at the end of global access list instead of at the interface. Ques...
hi, I am migrating from FWSM to ASASM. A question about the ACL migration. On my FWSM, I use the natted IP as destination in ACL. I know we will use the real IP on ASASM. But will the migration step can translate the whole ACL from natting IP to real...
Hello All,Since I was told that U-turn (or hairpin) traffic is allowed by default on a zone based firewall I decided to create a zone-pair like following to stop this from happening in case if somebody decides to hairpin thru my router using it as ju...
I have a number of ASA 5505 boxes which I need to reconfigure to work with a Watchguard XTM 850 over IPsec. The 5505s were previously configured to connect back to a 5510 Firewall using EasyVPN. With EasyVPN still enabled, the remote boxes attempt ...
