# ASA **URL:** https://forum.networklessons.com/c/security/asa/33.md [Latest](https://forum.networklessons.com/latest.md) · [Categories](https://forum.networklessons.com/categories.md) --- ## [About the ASA category](https://forum.networklessons.com/t/about-the-asa-category/39)
**Author:** [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Replies:** 0\ **Last updated:** [December 13, 2016, 12:33pm UTC](https://forum.networklessons.com/t/about-the-asa-category/39 "2016-12-13T12:33:24Z")
The Cisco Adaptive Security Appliance (ASA) is Cisco’s firewall. Any ASA related questions can be discussed here. --- ## [Cross VRF connectivity via ASA firewall](https://forum.networklessons.com/t/cross-vrf-connectivity-via-asa-firewall/58761)
**Author:** [@ikaralli99](https://forum.networklessons.com/u/ikaralli99)\ **Replies:** 4\ **Last updated:** [December 24, 2025, 6:22am UTC](https://forum.networklessons.com/t/cross-vrf-connectivity-via-asa-firewall/58761 "2025-12-24T06:22:30Z")
Hi @ReneMolenaar @lagapidis , Could you please share cross-VRF communication via Cisco ASA firewall, which has been separated into a multi-context mode scenario, including a topology diagram and configuration example, p… --- ## [LDAP Mapping Authorization](https://forum.networklessons.com/t/ldap-mapping-authorization/56105)
**Author:** [@kensmithh95](https://forum.networklessons.com/u/kensmithh95)\ **Replies:** 1\ **Last updated:** [March 22, 2025, 7:09am UTC](https://forum.networklessons.com/t/ldap-mapping-authorization/56105 "2025-03-22T07:09:53Z")
I am configuring LDAP attribute mapping in my ASA which will authorize depending on the attributes and I have two users. yohgonza which should authorize properly after the LDAP attribute mapping matches AndrewS which s… --- ## [Web/DNS server behind an ASA5506X](https://forum.networklessons.com/t/web-dns-server-behind-an-asa5506x/55405)
**Author:** [@wes](https://forum.networklessons.com/u/wes)\ **Replies:** 5\ **Last updated:** [February 18, 2025, 5:39am UTC](https://forum.networklessons.com/t/web-dns-server-behind-an-asa5506x/55405 "2025-02-18T05:39:17Z")
I have a CentOS system running CWP (Centos Web Panel, 192.168.20.100). The system is connected to the ASA interface on the same subnet (192.168.20.1). The server has a public ip address that gets natted to the 192.168.20… --- ## [Cisco any connect (management connection state is connected)](https://forum.networklessons.com/t/cisco-any-connect-management-connection-state-is-connected/23898)
**Author:** [@tivi30](https://forum.networklessons.com/u/tivi30)\ **Replies:** 4\ **Last updated:** [September 26, 2024, 7:46am UTC](https://forum.networklessons.com/t/cisco-any-connect-management-connection-state-is-connected/23898 "2024-09-26T07:46:11Z")
HI Everybody, I am a beginer network engeener. I would like to ask some help. We use sccm to update windows 10 computers. It works when the cisco any conect klient is not connected (no vpn connection) and than the m… --- ## [Cisco ASA - Allow Subdomain by FQDN](https://forum.networklessons.com/t/cisco-asa-allow-subdomain-by-fqdn/40379)
**Author:** [@leandro.correia](https://forum.networklessons.com/u/leandro.correia)\ **Replies:** 5\ **Last updated:** [March 5, 2024, 7:48am UTC](https://forum.networklessons.com/t/cisco-asa-allow-subdomain-by-fqdn/40379 "2024-03-05T07:48:00Z")
Dear, I need help configuring Cisco ASA to allow any subdomain like the example below via FQDN or another available method. Basically what I want is for this server to only be allowed to do Microsoft security updates. … --- ## [ASA5506W-X - Borrowing Its Internal AP702i Possible?](https://forum.networklessons.com/t/asa5506w-x-borrowing-its-internal-ap702i-possible/42892)
**Author:** [@matteo.guglielmi](https://forum.networklessons.com/u/matteo.guglielmi)\ **Replies:** 3\ **Last updated:** [February 15, 2024, 6:29am UTC](https://forum.networklessons.com/t/asa5506w-x-borrowing-its-internal-ap702i-possible/42892 "2024-02-15T06:29:00Z")
The ultimate goal of this unusual configuration is to have multiple broadcast domains shared by wireless and wired devices whose IP addresses are served by an external DHCP server. This means that two or more broadcast d… --- ## [Asa5525 nat](https://forum.networklessons.com/t/asa5525-nat/42327)
**Author:** [@gurowar](https://forum.networklessons.com/u/gurowar)\ **Replies:** 4\ **Last updated:** [January 29, 2024, 5:37am UTC](https://forum.networklessons.com/t/asa5525-nat/42327 "2024-01-29T05:37:18Z")
Good day all: Not sure what I am doing wrong here but I have an ASA5525 and I am trying to set up NAT but for some reason it isn’t working. I created the objects object network datadriven6.comedastaging.com host 220.… --- ## [ASA 5520 routing](https://forum.networklessons.com/t/asa-5520-routing/41682)
**Author:** [@gurowar](https://forum.networklessons.com/u/gurowar)\ **Replies:** 3\ **Last updated:** [January 19, 2024, 5:43am UTC](https://forum.networklessons.com/t/asa-5520-routing/41682 "2024-01-19T05:43:49Z")
I have a question, I have a pair of ASA5520s that is running in HA configuration. They are currently work fine when I am on the ATT internet. I am working to switch it over from ATT to Comcast internet and the only thin… --- ## [AnyConnect LDAP](https://forum.networklessons.com/t/anyconnect-ldap/40234)
**Author:** [@kensmithh95](https://forum.networklessons.com/u/kensmithh95)\ **Replies:** 0\ **Last updated:** [October 19, 2023, 6:34am UTC](https://forum.networklessons.com/t/anyconnect-ldap/40234 "2023-10-19T06:34:21Z")
previous note next note We have several AnyConnect VPN tunnel groups on our ASAv. Each tunnel group has its own authentication server group defined along with ldap attribute map. The problem is that users who are not… --- ## [FQDN Gelocation vs Certificate Geolocation](https://forum.networklessons.com/t/fqdn-gelocation-vs-certificate-geolocation/39621)
**Author:** [@kensmithh95](https://forum.networklessons.com/u/kensmithh95)\ **Replies:** 3\ **Last updated:** [September 27, 2023, 5:54am UTC](https://forum.networklessons.com/t/fqdn-gelocation-vs-certificate-geolocation/39621 "2023-09-27T05:54:12Z")
Hello Everyone, thanks for taking the time to read this. We have VPN for US region (separate fqdn) and VPN for UK region (separate fqdn). Leadership wants to segregate both region VPN based on certificates. Is there any … --- ## [ASA Images download Link](https://forum.networklessons.com/t/asa-images-download-link/37608)
**Author:** [@hemanttolwani1989](https://forum.networklessons.com/u/hemanttolwani1989)\ **Replies:** 1\ **Last updated:** [June 23, 2023, 5:02am UTC](https://forum.networklessons.com/t/asa-images-download-link/37608 "2023-06-23T05:02:08Z")
Could you please help me with the ASA Image where can I download ASA images and ASDM ? --- ## [Problem of ping : ASA](https://forum.networklessons.com/t/problem-of-ping-asa/34369)
**Author:** [@habib.emilie](https://forum.networklessons.com/u/habib.emilie)\ **Replies:** 1\ **Last updated:** [February 10, 2023, 8:16am UTC](https://forum.networklessons.com/t/problem-of-ping-asa/34369 "2023-02-10T08:16:21Z")
Hello, Could I have advices please? I can ping router 174.29.22.225 from my FW interface 174.29.22.231, but in the opposite direction it doesn’t work (174.29.22.225 can’t ping 174.29.22.231). The configuration of my F… --- ## [Two (2) switches with VLANs and Cisco ASA firewalls configuration](https://forum.networklessons.com/t/two-2-switches-with-vlans-and-cisco-asa-firewalls-configuration/14717)
**Author:** [@amichaelly](https://forum.networklessons.com/u/amichaelly)\ **Replies:** 7\ **Last updated:** [January 10, 2022, 1:33pm UTC](https://forum.networklessons.com/t/two-2-switches-with-vlans-and-cisco-asa-firewalls-configuration/14717 "2022-01-10T13:33:40Z")
Hello, I have two(2) Cisco switches 9200 (with EtherChannel and trunk connection), two(2) cisco ASA firewalls ( with Active/passive failover), and 2 Servers. The two(2) Cisco ASA (5516-X) firewalls are connected to the … --- ## [Packet drops in the IPsec Tunnel between Cisco ASA firewalls](https://forum.networklessons.com/t/packet-drops-in-the-ipsec-tunnel-between-cisco-asa-firewalls/15615)
**Author:** [@shivani.bsc29](https://forum.networklessons.com/u/shivani.bsc29)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 6:28am UTC](https://forum.networklessons.com/t/packet-drops-in-the-ipsec-tunnel-between-cisco-asa-firewalls/15615 "2021-10-21T06:28:16Z")
Hi , I am facing connectivity issue through the IPsec tunnel configured between Cisco ASA firewalls. Pls help & suggest the way forward to troubleshoot it. Scenario: The IPsec tunnel (Ikev1) was stable since years but … --- ## [ASA ICMP from Outside to Inside| Help!](https://forum.networklessons.com/t/asa-icmp-from-outside-to-inside-help/14905)
**Author:** [@lucasferreir487](https://forum.networklessons.com/u/lucasferreir487)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 5:11am UTC](https://forum.networklessons.com/t/asa-icmp-from-outside-to-inside-help/14905 "2022-10-20T05:11:16Z")
Hello Guys, I am confused at theoretical part,I don’t know if I can do what i am intending to do. I have ASA 55x configured and i’m able to ping from outside to dmz by rules pre defined without problems, however when I… --- ## [Allowing a VPN tunnel through iuntermediate routers?](https://forum.networklessons.com/t/allowing-a-vpn-tunnel-through-iuntermediate-routers/32396)
**Author:** [@mandrich](https://forum.networklessons.com/u/mandrich)\ **Replies:** 1\ **Last updated:** [November 22, 2022, 6:09am UTC](https://forum.networklessons.com/t/allowing-a-vpn-tunnel-through-iuntermediate-routers/32396 "2022-11-22T06:09:06Z")
Good day, I’m working with the following topology to learn L2L VPNs. I am attempting to define two tunnels. The first is between R1 and R3 via FW1 and FW3, and then between R2 and R4 via FW2 and FW4. I configured the tu… --- ## [Connect to VPN client from inside network](https://forum.networklessons.com/t/connect-to-vpn-client-from-inside-network/30389)
**Author:** [@craig.stephens](https://forum.networklessons.com/u/craig.stephens)\ **Replies:** 1\ **Last updated:** [September 12, 2022, 10:15am UTC](https://forum.networklessons.com/t/connect-to-vpn-client-from-inside-network/30389 "2022-09-12T10:15:28Z")
Hi everyone, I’m a bit of a newbie, so go easy on me! I have been trying to do some self learning with some kit that I have access to. One of the things that I have setup recently is configuring an ASA5510 to allow An… --- ## [ASA 512 migration to Firepower 1010 with asa image](https://forum.networklessons.com/t/asa-512-migration-to-firepower-1010-with-asa-image/27806)
**Author:** [@tivi30](https://forum.networklessons.com/u/tivi30)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 6:42pm UTC](https://forum.networklessons.com/t/asa-512-migration-to-firepower-1010-with-asa-image/27806 "2022-06-22T18:42:32Z")
Hi Lagapides, We bought the Firepower 1010 with ASA image. And old asa is 5512. Is it possible to move the config old asa 5512 to Firepower 1010 with asa image? If yes what is the conditional? I tried it, every conf… --- ## [Cisco Asa Security Context](https://forum.networklessons.com/t/cisco-asa-security-context/27825)
**Author:** [@Ciscobiscuit](https://forum.networklessons.com/u/Ciscobiscuit)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 8:56am UTC](https://forum.networklessons.com/t/cisco-asa-security-context/27825 "2022-06-22T08:56:11Z")
Hi, I understand that you can run security contexts to “virtualize” an ASA into two “separate” Firewalls for example. But does anyone know if I had a physical ASA and using security contexts made it into two “separate”… --- ## [Reimage Cisco Firepower to Cisco ASA](https://forum.networklessons.com/t/reimage-cisco-firepower-to-cisco-asa/27428)
**Author:** [@tivi30](https://forum.networklessons.com/u/tivi30)\ **Replies:** 5\ **Last updated:** [June 17, 2022, 8:14am UTC](https://forum.networklessons.com/t/reimage-cisco-firepower-to-cisco-asa/27428 "2022-06-17T08:14:39Z")
HI everybody, I would like to convert cisco Firepower 1010 for cisco ASA because our ASA was broken and after that i wuld like to load back the backup (broken asa) from ASDM to new ASA. Coud everybody help me? It is … --- ## [Using ASA IPSec tunnel like a GRE tunnel to route subnet](https://forum.networklessons.com/t/using-asa-ipsec-tunnel-like-a-gre-tunnel-to-route-subnet/27444)
**Author:** [@mr.absinthe](https://forum.networklessons.com/u/mr.absinthe)\ **Replies:** 1\ **Last updated:** [June 6, 2022, 7:49am UTC](https://forum.networklessons.com/t/using-asa-ipsec-tunnel-like-a-gre-tunnel-to-route-subnet/27444 "2022-06-06T07:49:23Z")
I am having trouble configuring 2 Cisco ASA firewalls for a VPN tunnel that I am essentially trying to route subnet across. If the equipment was not already deployed, and it wouldn’t require travel to 2 different remote… --- ## [Cisco ASA 5525X 9.8 Remote Access VPN Hairpin NAT (spoke to spoke) communication issue](https://forum.networklessons.com/t/cisco-asa-5525x-9-8-remote-access-vpn-hairpin-nat-spoke-to-spoke-communication-issue/27015)
**Author:** [@angel.sanchez](https://forum.networklessons.com/u/angel.sanchez)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 9:06pm UTC](https://forum.networklessons.com/t/cisco-asa-5525x-9-8-remote-access-vpn-hairpin-nat-spoke-to-spoke-communication-issue/27015 "2022-05-18T21:06:11Z")
Hello everyone, this is my first post here, hopefully is just something I’m not able to see but; I have this requirement to enable Anyconnect users to access certain resources thru an existing VPN tunnel (a pretty simple… --- ## [IP SLA Tracking on Cisco ASA](https://forum.networklessons.com/t/ip-sla-tracking-on-cisco-asa/26563)
**Author:** [@mcpp66](https://forum.networklessons.com/u/mcpp66)\ **Replies:** 6\ **Last updated:** [May 9, 2022, 2:59pm UTC](https://forum.networklessons.com/t/ip-sla-tracking-on-cisco-asa/26563 "2022-05-09T14:59:25Z")
What do you all use for IP SLA tracking on the Cisco ASA? It seems as though most people use 8.8.8.8 but I’m not so sure this is a good idea. This is Google’s DNS and it seems to me that Google can decide to block those … --- ## [Cisco ASA 5508](https://forum.networklessons.com/t/cisco-asa-5508/24802)
**Author:** [@tivi30](https://forum.networklessons.com/u/tivi30)\ **Replies:** 2\ **Last updated:** [March 16, 2022, 9:01am UTC](https://forum.networklessons.com/t/cisco-asa-5508/24802 "2022-03-16T09:01:26Z")
Hi Everyone, We have a Cisco ASA 5508 and i would like to install a new certifacete for remote access VPN. The cert is ready. But i can not do it. The browser show that it is use the old cert. coud Somebody send me a… --- ## [Update Firmware: Unable to access 2nd ASDM \[HA Setup\]](https://forum.networklessons.com/t/update-firmware-unable-to-access-2nd-asdm-ha-setup/24700)
**Author:** [@iammainefernandez](https://forum.networklessons.com/u/iammainefernandez)\ **Replies:** 3\ **Last updated:** [March 12, 2022, 6:02am UTC](https://forum.networklessons.com/t/update-firmware-unable-to-access-2nd-asdm-ha-setup/24700 "2022-03-12T06:02:16Z")
Hi Network Lessons, I am new using ASA and planning update 2 Firewall via ASDM next week, I have checked that I need to update the two firewall firmware as per CISCO. As the setup has been here before I came in the … --- ## [How do I choose which ASA to use?](https://forum.networklessons.com/t/how-do-i-choose-which-asa-to-use/14484)
**Author:** [@valerio.baroni](https://forum.networklessons.com/u/valerio.baroni)\ **Replies:** 9\ **Last updated:** [January 27, 2022, 8:26am UTC](https://forum.networklessons.com/t/how-do-i-choose-which-asa-to-use/14484 "2022-01-27T08:26:54Z")
I would like to ask for help, i should choose an ASA firewall for our company, considering we have a couple of services on a DMZ and a INSIDE network, are there any steps to follow in order to buy a correct firewall? Th… --- ## [Cisco ASA - ICMP Replies failing - LAN TO DMZ](https://forum.networklessons.com/t/cisco-asa-icmp-replies-failing-lan-to-dmz/15807)
**Author:** [@ade.pase](https://forum.networklessons.com/u/ade.pase)\ **Replies:** 1\ **Last updated:** [November 21, 2021, 6:33am UTC](https://forum.networklessons.com/t/cisco-asa-icmp-replies-failing-lan-to-dmz/15807 "2021-11-21T06:33:12Z")
I have a perculiar problem with Cisco ASA that I have been trying to resolve for many days but I cannot even find the root cause. I have a network as seen in the diagram below. I cannot establish pings between these two … --- ## [Does Cisco ASA firewall provide DDoS protection?](https://forum.networklessons.com/t/does-cisco-asa-firewall-provide-ddos-protection/15542)
**Author:** [@shivani.bsc29](https://forum.networklessons.com/u/shivani.bsc29)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 1:15am UTC](https://forum.networklessons.com/t/does-cisco-asa-firewall-provide-ddos-protection/15542 "2021-10-13T01:15:13Z")
Hi, I would like to know whether the cisco ASA firewall provide the DDoS protection ? If yes, then how & if no, then request you to suggest the solution that we can use along with the existing ASA firewall in place ? --- ## [Does FTD fastpath eliminate stateful inspection?](https://forum.networklessons.com/t/does-ftd-fastpath-eliminate-stateful-inspection/15429)
**Author:** [@network23](https://forum.networklessons.com/u/network23)\ **Replies:** 4\ **Last updated:** [October 8, 2021, 10:18am UTC](https://forum.networklessons.com/t/does-ftd-fastpath-eliminate-stateful-inspection/15429 "2021-10-08T10:18:06Z")
When you configure traffic in the pre-filter on a FTD eliminate stateful inspection in addition to deep inspection? I have opened TAC cases on this before and received two different answers and was wondering if anyone c… [Next page](https://forum.networklessons.com/c/security/asa/33.md?page=1)