Since the Cisco ASA is a security device, It does not support CDP/LLDP which collects information on neighboring NW devices. Information on the Cisco Support Community Several questions on ASA's CDP/LLDP compliance status are being made. T…

I am building a DMZ in my home lab with the Cisco ASA 5505. In the case of a simple inside-outside setting, set the security level to inside: 100, outside: 0 and allow traffic from outside by FW and NAT. However, inclusion of the DMZ makes…

I had trouble communicating from the DMZ to the inside when I built a DMZ with ASA 5505 in my home laboratory. Components Cisco ASA 5505 (BASE License, Ver.9.2 (3)) Cisco Catalyst 2960 VMware ESXi Because ASA 5505 can not use VLAN trunk wi…

With the basic license, the Cisco ASA 5505 can set up to three VLANs. However, if you try to set it normally, you will get an error when setting nameif in the third VLAN. Describe how to resolve the error and set nameif in the third VLAN. …

X-Forwarded-For (XFF) header to be important in the HTTP communication of NAPT environment of Proxy environment. In many cases Cisco ASA, which is used as a NAPT router, describes the grant of XFF header. Check result Defect information Al…

Some of the settings to ensure proper operation of the traceroute in an environment that uses a Cisco ASA as a NAT router is required. NAPT in the Internet connection part, inspect, ACL, note for reviewing the various settings, such as pol…

In order to allow the traceroute to be used in the communication confirmation of the network in the FW is passed, it is necessary one time. Traceroute : command to check the network path by utilizing a TTL expired Specification of tracerou…