Hi All,
We're massively cleaning up firewall rules to harden the network, but on some interface we have some permit ip any any rules which ofcourse are hit massively. I want to further investigate this but haven't done this before.
What is the go...
Hello,
I have a problem connecting to ASA 5505 via ASDM. I am able to download and start the application but as soon as I start in put in the IP address it gets stuck on the login page saying "connecting to the device". Java logging shows the error...
So we have a pair of firepower/NGfws (asa 5555x) and we are upgrading our internet connections in 3 locations...2 of which are getting a new IP space. We do ALOT of stuff on our firewall, aside from NAT for outbound web surfing, we have statics for ...
what is the difference betwenn URL filtering Feature and URL, DNS, IP Address feature from Security Intelligence? Where should i apply the url filtering feature and when the security intelligence feature? I am confuse about these two feauture because...
Hi All,
Recently during IOS upgrade in Cisco ASA pair (active/stby), users experienced partial outage after I failed over the traffic to secondary ASA, while upgrading the primary. Basically connection table didnt get replicated completly. So how t...
Hello. I have two L3-switches, they are as default gateways for other devices and provide fault tolerance by the VRRP.
On these devices i manually created ACL, the rule must be edited and added on both devices. Is there any way to configure replicati...
hi everyone
I wanna upgrade my asa os from tftp server. I set this variables in rommon mode:
ROMMON Variable Settings:
ADDRESS=172.17.17.216
SERVER=192.168.199.17
GATEWAY=172.17.17.214
PORT=Data0
VLAN=900
IMAGE=asa916-10-smp-k8.bin
CONFIG=
LINKTIME...
Despite reading for days, I feel like I'm missing something fundamental.
The TID option of FMC needs sources. Cisco doesn't provide sources? (That's a question, maybe I'm missing something).
I've seen recommendations to use AlienVault OTX and Haila...
Hello ,
I need to put 2 Cisco 4120 in cluster (active / passive)
Can the clustering be done using the 8-port 1Gbps copper, FTW (fail to wire) Network Module ?
Thanks
Hello ,
I am planning to put 2 Cisco firepower in cluster.
For redundancy purposes , i was planning on performing LACP on the firepower for my trunked (about 50 vlans) interfaces. Is this feasible?
The firepower will be connected to a 3850 stac...
Hello , a company is acquiring a cisco firepower to protect their ebanking website (SSL encrypted).
IPS signatures will be activated to protect the Ebanking website , but all traffic going through the firepower will already be encrypted.
Questi...
I have six ASA 5500 firewall 4 are 5585 and two 5515 and they are connected active standby.
our security team scans and find a vulnerability on the certificate in use. I have gone to our CA and requested certificates. It worked on the 5515 fire...
hi all,
I need help. when i reload the asa and upgrade the version 9.9.2.1. The memory is also high compare before.
SHZT-Test-5F-FW# show processes memory //such processes are high
3269725 1382260931 438394 14255590 ...
