Tag Archives: asa

IKEv2 between ASA firewall and IOS router

Posted on January 26, 2015 by Sasa

In previous blog we saw hot to do a site to site IPSec VPN between two Cisco ASA devices. Using IKEv2 for policies negotiations and tunnel establishment. Now, we will change our scenario a bit so that “Company B” uses … Continue reading →

Posted in ASA, Cisco, IOS, VPN | Tagged , , , , , | 7 Comments

IKEv2 between ASA devices

Posted on January 18, 2015 by Sasa

We have many IKEv1 VPN tunnels under our belts. Now more and more devices support version two of that protocol known as IKEv2. Cisco ASA is no different. We won’t discuss all changes and benefits that are brought to us … Continue reading →

Posted in ASA, Cisco, VPN | Tagged , , , , | 4 Comments

Cisco ASA port forwarding

Posted on January 18, 2015 by Sasa

In this article we saw how to do a static NAT on both ASA pre-8.3 and post-8.3 code. Now we will see how to do a port forward on ASA post 8.3 code. Let’s face it, it is time to … Continue reading →

Posted in ASA, Cisco, NAT, Security | Tagged , , , | Leave a comment

Verifying a MD5/SHA1 sums before system upgrade or install on ASA/IOS

Posted on September 26, 2013 by Sasa

In one of my previous blogs I stated that we should *always* verify if a download for some upgrade or installation package is correct. We can verify that by comparing MD5/SHA1 sums from the site we downloaded the software from, … Continue reading →

Posted in ASA, Cisco, IOS | Tagged , , , , | Leave a comment

Upgrade Cisco ASA software

Posted on August 21, 2013 by Sasa

Cisco ASA now days can run three generations of code, depending on the hardware platform and memory installed. These are 7.x, 8.x and 9.x. Not all ASAs can run any version of code. For example, “Cisco ASA 1000V cloud firewall” … Continue reading →

Posted in ASA, Cisco, Security | Tagged , , | 11 Comments

Renewing Cisco ASA identity certificate

Posted on August 5, 2013 by Sasa

Let’s say that we use certificates for authenticating our VPN connections. It does not matter if they are traditional Cisco IPSec or new AnyConnect clients. If we did not set our PKI infrastructure and ASA for auto enroll, what is … Continue reading →

Posted in ASA, Certificates, PKI, VPN | Tagged , , , | 3 Comments

L2TP/IPSec with Windows 8/7 and Cisco ASA 8.x/9.x

Posted on March 6, 2013 by Sasa

Well, Windows 8 is here and we will some day migrate to it. At least we who are using Microsoft OSes. This poses one problem. This problem is not directly attached to W8 itself, but with W8 we begin to … Continue reading →

Posted in ASA, Cisco, Microsoft, Security, VPN | Tagged , , , | 30 Comments

ASA Pre-8.3 and Post-8.3 NAT – Static NAT

Posted on September 26, 2012 by Sasa

In our previous blog, we compared a differences with dynamic NAT/PAT between pre-8.3 and post-8.3 ASA code. Now we will do the same with a static NAT. The diagram is the same: We want to allow all users from the … Continue reading →

Posted in ASA, Cisco, GNS3, NAT | Tagged , , , , , , | 1 Comment

ASA Pre-8.3 and Post-8.3 NAT – Dynamic NAT/PAT

Posted on September 26, 2012 by Sasa

I like short blogs. When reading a long one, when I reach the bottom, I forget what was at the beginning. This one will be short. I would like to demonstrate the differences in configuring dynamic NAT for Internet access … Continue reading →

Posted in ASA, GNS3, NAT | Tagged , , , | 1 Comment

ASA firewall in multiple context mode

Posted on August 9, 2012 by Sasa

In our previous blog, we saw that the ASA can be virtualized into many virtual firewalls or contexts. Now, we will see how. We will use this topology:   We will focus on ASA1 physical box and set it up. … Continue reading →

Posted in ASA, Cisco, Virtualization | Tagged , , , , | 4 Comments