! PermitANY — Cisco ASA Base / Day-0 Configuration ! Initial hardened configuration for a Cisco ASA firewall: hostname, domain, enable password, SSH access, AAA, NTP, logging, and management interface. ! Generated: 2026-09-21 ! These are EXAMPLE values. Replace with your actual config before deploying. ! hostname ASA-EDGE-01 domain-name corp.example.com ! enable password Str0ngP@ss! ! interface Management0/0 nameif management security-level 100 ip address 192.168.1.1 255.255.255.0 no shutdown ! username admin password Adm1nP@ss! privilege 15 ! aaa authentication ssh console LOCAL aaa authentication enable console LOCAL aaa authorization command LOCAL ! crypto key generate rsa modulus 2048 ssh version 2 ssh 192.168.1.0 255.255.255.0 management ssh timeout 10 ssh key-exchange group dh-group14-sha1 ! clock timezone UTC 0 ntp server 0.pool.ntp.org ntp server 1.pool.ntp.org ! logging enable logging host management 10.0.0.200 logging trap informational logging buffered warnings ! no http server enable no snmp-server enable traps ! service password-encryption banner login WARNING: Authorized access only. All activity is monitored. !