Network Security

Cisco ASA Connection Count

Hello All, We have Cisco ASA in production environment on which i see the connection count more than 300000 which is more than usual which we observe. Kindly let me know is this normal or is there any way to reduce it. Also if i clear the connection...

not possible to manage my Cisco ASA when connected through Anyconnect

Hi there, I tried serveral things to get my firewall MANAGED through Cisco Anyconnect. I get connected, I can even ping my device when vpn connected but cannot manage it !!! Not with ssh, not with ASDM, not with telnet for example, Anyone any advice...

Access server within the DMZ using it's public IP/hostname

Hello, I have implemented ASA 5516-x with inside, dmz, outside network. Inside can connect to dmz (both local hostname and public IP/hostname) outisde can connect to dmz (public IP/hostname) Any dmz server tries to connect to the Public Server (Pub...

Unable to access Firepower Device Manager

Hi All, I have re-image my ASA 5515-x with SSD to FTD 6.1.0. Following are my objective.. 1) Access FTD locally through FDM 2) Point the FTD to FMC 6.1.0 Following are my observations 1) My ASA 5515-x which has FTD 6.1.0 image installed on it, is no...

Cisco ASA with firepower services vs FTD

Hello, Whats the difference between traditional Cisco ASA with firepower vs new Cisco Firepower threat defence. why customer will go for Firepower threat defence, if they already have Cisco ASA with firepower services. what are the benefits of FT...

VLANs can't access Internet through ASA5505 firewall

Hi, I'm doing project of network in Packet Tracer, but I encountered a problem with connection between vlans and Internet. I have ASA5005, two layer 3 switches (3560, one for each building) and bunch of layer 2 switches (one for each floor of buil...

Resolved! version 9.0.4.ED

Hi, Does version 9.0.4.ED for model ASA 5520 fixed bug issues CSCux29978 and CSCux42019? I have a pesky customer keep on chasing for the bug issues for 9.0.4 ED while he think only 9.0.4(38) fixed the issues. I check for 9.0.4(38) is for other model...

One internal IP NAT'd to 2 external IP's

Hey all, I've got a new position and I'm exploring the existing environment. I've found that on my ASA 5510 (primary gateway) I've got a single internal IP that is NAT'd to 2 external IP's on different circuits. The original engineer that set this...

ASA with FirePower Services

Hi, please, is there a performance difference between an ordered ASA5515-FRPW-K9 and the ASA5515-K9 later associated with SFR Module?

Intrusion Prevention on source fire

Dears Please find the attached screenshot and anybody can confirm to me IPS is dropping the traffic or letting it go. I have enabled recommended settings in the IPS leaving the decision to IPS The inline result shows me that it is dropped but infact...

Resolved! Unable to run ASDM

Hello All, Happy New Year 2017. I just received a RMA for ASA 5505 Appliance with SW 10 Users 8 ports 3DES/AES. The problem here is i unable to run https://192.168.1.1/admin on my IE and Firefox browser. On IE shows This page can’t be displayed ...

Resolved! Cisco Security Manager capability question

Hello all, Hopefully someone here can answer this question about Cisco Security Manager. Can Cisco Security Manager receive and display syslog messages sent from a Firepower Management Center? My testlab observations of the Cisco Security Manager p...

Resolved! are the 2960G series switches compatible with ISE 2.x?

Hi. I have bunch of 2960G-8TC-L and 2960G-24TC-L switches. ISE 2.x compatibility guide does not list the 2960G in there. http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/compatibility/ise_sdt.html#pgfId-198199 So I just want to find out if t...

Configuring Cisco ASA 5540 Transparent Mode topology

Hi Guys, I’m having trouble configuring a Cisco ASA 5540 in transparent mode: The current topology is below: ! ! I would like only specified host/IP addresses to communicate with 192.168.0.101 and vice-versa, these devices are on the same...