Network Security

Below is the firewall config (with all the company info removed) that I'm trying to deploy in our environment.Firewall is in the internal 10.68.48.0/20 subnet, I cannot ping the other internal subnets of the organization - eg, 10.7.0.0/20 subnet from...

Dear experts,Is one able to rate limit below items when configuring security context on a ASA5520?1) NAT2)MAC Learning3) Stateful packet inspectionsMy understanding is that only ASDM sessions rate and connections rate as well as syslog msg rates are ...

Hey Guys,   Firewall ASA5506-X   I am baffled and can't figure out why when the VPN is up to azure I lose all internet traffic on my home network. (I am complete noob to Cisco so excuse my ignorance and i hope its something simple.   I have a Site to...

Hello  i have got an issue in FTD logging. i have configured logging in Cisco Firepower 4110 running FTD 6.2.2 and i have configured logging to log from all connections and sessions. i have NAT on the FTD and logs of NAT doesn't display the public IP...

We are about to configure NAT on a Client's ASA Firewalls and we need some examples on how to go about configuring ospf for external (outside) interface that will advertise NATed addresses (or NAT Pools) and how to configure the ospf for internal net...

hi, i had a ASA context outage and notice there was a typo on it's config-url. i need to rectify it but need a quick check if the change is SAFE and will NOT affect live traffic on the said context?   context CUST-A  allocate-interface GigabitEtherne...

Hello I am trying to upgrade from 8.5 to 9.2 but am having some issues with traffic I need going to inside ip 10.8.8.4 on port 1287.  I am seeing this error when the traffic is trying to hit the internal ip. 4Aug 28 200802:58:58 166.150.233.934189710...

Kindly help to resolve issue for below shown logs.   SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 229 on GigabitEthernet0/1 VLAN1. SPANTREE-2-BLOCK_PVID_PEER: Blocking GigabitEthernet0/1 on VLAN0229. Inconsistent peer vlan S...

It seems like most of the info that you find on trying to run AD traffic on an ASA between inside and DMZ hosts is "don't do it!", "its a mess!", "MS AD doesn't play nice!".  However there is an article on PeteNetLive, KB0000973 that references DCERP...