ASA
·
ASA Clustering Explained: Spanned vs Individual Interface Mode
Failover gives you two firewalls acting as one for redundancy. Clustering takes that idea and scales it out: up to
ASA
Cisco Adaptive Security Appliance, the stateful firewall platform that has anchored enterprise perimeters for two decades and is now being succeeded by Secure Firewall (FTD). Articles tagged ASA cover security levels, NAT 8.3+ and twice NAT, ACLs, AnyConnect SSL and IKEv2 VPN, site-to-site IPsec, failover, packet-tracer, hardening, and ASAv 9.x lab walkthroughs.
Latest
ASA
·
ASA Resource Classes: Stopping One Context From Eating the Firewall
Once you slice a Cisco ASA into multiple security contexts, you have created a shared-resource problem. All those virtual
ASA
·
ASA Security Contexts with Shared Interfaces: Classification Rules
Security contexts turn one physical Cisco ASA into many independent virtual firewalls, each with its own interfaces, policies, and administrators.
ASA
·
ASA Active/Active Failover: Failover Groups and Asymmetric Reality
Active/Active failover is the design people reach for when Active/Standby feels wasteful: instead of one firewall doing all
ASA
·
EtherChannel on the Cisco ASA: Port-Channels, LACP, and Failover Interaction
EtherChannel is the feature that lets a Cisco ASA treat several physical links as one fat pipe: more bandwidth when
ASA
·
ASA Redundant Interfaces: The Simplest Link HA You Can Configure
When people talk about high availability on the Cisco ASA, they usually jump straight to failover: two firewalls, one active,
ASA
·
NAT and ACLs Together on ASA 8.3+: Real IPs, Not Mapped IPs
Ask a room of network engineers which IP an ASA access list should reference when you publish a server, the
ASA
·
The ASA NAT Table Explained: Sections, Order, and Which Rule Wins
ASA NAT feels mysterious right up until the moment you understand the table. Once you can picture the sections, read
ASA
·
Static Identity NAT on the ASA: Translating Nothing, On Purpose
Most NAT rules exist to change an address. Identity NAT is the odd one out: it is a rule whose
ASA
·
Destination NAT on the ASA: Policy NAT for Inbound Services
Standing up a web server is easy. Letting the internet reach it, through a firewall, without exposing the rest of
ASA
·
ASA Management Access Done Right: SSH, HTTPS, SNMPv3, NTP, and Logging
Reaching and monitoring a firewall is a security problem in its own right. Every management channel you open, SSH, HTTPS,
ASA
·
RIPv2 on the Cisco ASA (and Why You'd Still See It)
RIP is legacy. Nobody designs a new network around it, and if you proposed running RIPv2 as your core routing