Network Security

Resolved! Logging information

Hi Guys, I have enable logging on our ASA5516 firewall and the logs are going to a syslog server. Below are the commands which I enabled: logging buffer-size 1000000logging monitor debugginglogging buffered informationallogging trap informational...

Question about swapping HDD on failed Cisco ASA 5545 to new Cisco ASA 5545 replacement

Hey Guys, Question about the subject. We have a Cisco ASA 5545 HA setup. The primary ASA failed on us and the standby is currently handling all traffic. We received the new ASA 5545 (grey market) in, and need to replace the bad one... Can I jus...

Question about NAT and two Internets (default routes)

Here is my current setup * main location with Firepower 2100 and Internet with DMZ/Servers. Default route for all networks goes to this firewall. * new location with Firepower 2100 and Internet with DMZ. Trying to setup a NAT from a DMZ IP Address...

Resolved! NAT issue with IPSEC Failover

Hello, how can I get the static nat statements to dynamically shift when an IPsec tunnel is down and let the ASA not use it?

FMC can not stop the process when update Firepower

I have a question about Firepower jion the FMC. i can be sure network connectivity is normal and the key is match. but the process is stop 17% and still 21h hours。 it seems like still running

Resolved! Need Help with config migration from ASA 5505 8.2.5 to ASA 5506 9.2

Hi Team I would like to get little help from you all to migrate the config form ASA 5505 running 8.2.5 code to ASA 5506 running 9.2. Thanks in advanced

Traffic rate on ASA interface

Hi, I have ASA directly connected with Nexus switch. When i see the traffic rate at both side on directly connected interfaces, there is a major difference. NEXUS-9K# sh interface eth1/41 | in rate 30 seconds input rate 270831600 bits/sec, 91518 ...

Rule making for anything inbound

Forgive the question, I'm still learning quite a bit. I was trying to think up some rules for my 5506 to make my network more secure, but I already don't allow any access from the outside to inside, and don't even really have any rules yet. It's a sm...

Resolved! Does ASA 5505 support FTD or Firepower services

Hi All 1.)We are using Cisco ASA 5505 with Security+ license. is it possible to use firepower module or new FTD in 5505 model. 2.)if not how much it should cost for vFTD and vFMC. does vFTD will support all features. 3.) we have 6 ASA 5505 now want...

SFR Block with reset

On FirePOWER, Access Control Policies can be configured for blocking with RESET. Cisco's documentation doesn't say if the RST flag is sent to both source and destination. Some IPS vendors don't send the RST to the offender. So, how is FirePOWER do i...

Resolved! ASA and Dynamic DNS Question

Community, I'm experiencing the following issue: Anyconnect VPN clients get their DHCP settings from the Cisco ASA via the VPN group policy and not from a back end windows server. What were noticing is that the "A" Records in our Windows DNS for...

Resolved! Cisco Amp on linux

Hi Dear, kindly tell me please how do i install cisco AMP on linux centos machine. your reply will be highly appreciated

Cisco ASA code 8.3 Nat and Acls

I Know version 8.3 onward , IP address used in the ACLs are different . we need to allow real ip address in Acls . recently attended interview and I was asked to explain why real ip address need allowed instead translated IP in ACL (version 8.3 Later...

Resolved! Have traffic bypass Firepower inspection

Hi Everyone, I have been banging my head trying to get this working... Right now I have ASA-5516 with firepower configured and working. Using ASDM, I have a Service policy under global named sfr, that classifies all traffic with ACL using ANY Source...