Cisco ASA - Recent Questions, Troubleshooting & Support - Page 6

Here is a great article on how to update your firmware:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008067e9f9.shtml#maintask3

Good Luck!

Hello ,
the Steps which u want to export and import configuration in Cisco ASA5510
1- connect yourself to your Cisco gateway by IP
2- Get TFTP server to your PC like( solarwind , Tftp server , ... ) any tftp download and upload program
3- now u need to copy running configuration to your pc by order
#copy run tftp , then follow the steps
NOTE: u should be in the same network or u need your pc and cisco box both have publick IP

4- if u want to put prepair config files to your gateway , you will need to type order
#copy tftp run , then foloow the steps

If u need anything else please let us know by leave your completely request or join us with www.fixya.com

Regards,
Samer

Actually you can't really block this one (not if the users have a clue) unless you have a content filtering solution on your network AND you are terminating your SSL connections on the content filtering device AND not allowing proxy servers.

Try blocking access to https://secure.logmein.com (but as I said - a user with a little wits will bypass you block using proxy setting on the client).

Use a web browser and point it to the private IP address of the ASA. Download ASDM and run through the wizards.

Good Luck!

Hi Thangaraj_j,

Can you provide the topology of your setup? Can you provide also the following:

- running configuration of the ASA
- ip address of the server (what kind of server is this? what tcp/udp port does it use)
- show xlate
- show con
- show log

Just a quick try, have you tried clearing the translation and the arp table?

commands to do it:

clear xlate
clear arp
clear local

Let me know and if it still doesn't work, try to ping the server from the pc clients and see if ping does work. (you need to allow icmp to pass thru in case you are denying it for testing purposes) Just send me the additional information given above.


Regards,

ex_ocsic_cat

It is not possible to block the BitTorrent protocol, as the client applications have the ability to use different port numbers.  I suggest one of the following courses of actions:
1)  Added deny entries to your outbound access-list that block the specific IP addresses of the torrent trackers.  For example: tracker.thepiratebay.org = 77.247.176.145
tv.tracker.thepiratebay.org = 77.247.176.154
tracker.mininova.org = 87.233.147.137

2)  Re-configure your outbound access-lists to allow only services required for business activities.  For example, allow only http, https, and ftp, instant messaging from all your network.  Allow only dns from your DNS servers.  Allow only smtp from your mail server.

hello ,
try this http://www.ecommercetimes.com/story/21764.html
it will helps you ,

thanks.

Hi,

try this http://www.ciscopress.com/articles/article.asp?p=25326

it will helps you

thanks .

Basic Commands pixfirewall(config)#hostname PIX !--- Naming the PIX is optional. PIX(config)#nameif ethernet2 fo security20 !--- Naming the interface is optional. It is recommended that you !--- hardcode the speed/duplex. PIX(config)#interface ethernet2 100full !--- Bring up the interface. PIX(config)#ip address fo 192.168.1.1 255.255.255.0 !--- Assign an IP address. Failover Commands PIX(config)#failover ip address fo 192.168.1.2 !--- IP address for the failover link. PIX(config)#failover lan unit primary !--- This unit is primary . PIX(config)#failover lan interface fo !--- The 'fo' interface is used for LAN failover. PIX(config)#failover lan key cisco !--- The Pre-shared key. PIX(config)#failover lan enable !--- Enables failover. PIX(config)#failover !--- Start the failover process. This message appears on the console:
LAN-based Failover: trying to contact peer LAN-based Failover: Send hello msg and start failover monitoring

take this site address u will get all the commands of firewall

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/asa80cfg.pdf

PPPoE is not supported when failover is configured on the security appliance, or in multiple context or transparent mode. PPPoE is only supported in single, routed mode, without failover.

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/pppoe.html

You seem to have the last resort (o.o.o.o) set to VLAN1 which is set as an inside interface.
Is VLAN1 connected to the outside router or internet backbone?
If not, change the last resort to the outside Ethernet port.

This is for the pixes, I haven't upgraded an asa yet...should be close or the same

* find latest version of code, these are usually *.bin files located on http://www.cisco.com/cgi-bin/tablebuild.pl/pix
* confirm the flash and RAM requirements of the PIX OS software versus what the PIX has (”sho ver”)
* make sure you have a backup of the old PIX OS and PDM to the tftp server (or at least confirm the software is there)
Note: You cannot back them up from the PIX, so you will need to download them and put them on the tftp server * put in a change control form
* once change controls confirms date/time do the upgrade:
wri mem*** only if you save your configs via tftp wri net conf t ca save all copy tftp://your tftp server ip/pix635.bin flash:imageskip this if you don't use pdm copy tftp://your tftp server ip/pdm-304.bin flash:pdm *** if this is a failover pair, upgrade the other pair reboot

If I understand you right, you want to setup a ASA firewall.( VSNL broadband is a company in India I believe) but once you get a static IP
you can assign that ip address to the outside of your asa. Put your dsl
router in pass through mode. This will then allow you to nat your inside
network and for you to accept vpn requests. To set all this up you need to get documentation from Cisco.

Make sure that the subnet for the call manager is available over your VPN if you have locked the tunnel down. Also make sure that the IPC is allowed to bind to the VPN virtual network card.

Hope that helped!

If you are looking for a solution to recover EDB file into PST format then you can try Eseutil/R command provided by Microsoft in order to repair corrupted or damaged EDB file. In case if your trouble still remains same then you can go for a third party tool as there are plenty of options available over the net.

serch on :Fiberstore.com .all kinds of sfp transceiver module in Fiberstore .Tt is a fiber optic products online store. you can access to fiber optic transceiver directly.

There could be something stuck inside. Look inside and inspect to make sure there's no paper or anything else clogging in

Try hard-wiring your laptop to the router with an ethernet cable as a test and then try printing, if you do not loose connection to the internet then the problem is probably that the printing is hogging your wireless bandwidth.If the same thing happens with loosing connection to the internet try connecting to the internet real quick through another computer that is hardwired, you want to find out if the problem is a wireless one or that affects wired computers also. You might need a driver upgrade, you also might need to upgrade the firmware of the router

talk to CISCO on there official forum. real start here https://community.cisco.com/ why go anywhere else. as rules can be fluid , for sure if security gets more tight every day. talk to them , actual