Network Security

Hello need advice on how to identify who is using an IPSec tunnelcan not capture packets using because of encryption, correct ? if I do a show vpn-seas l2l I see the tunnel peer and the destination which is the Asa outside interface I need to identif...

Dear Expert,   I may Etherchannel on FTD 2110 appliance is staying in down state. When configuring on FMC I used active has state. PLease Help me with your Expertise to solve this.   regards, Zanga

I have a very unusual situation. I have an ASA 5515-x running Cisco Adaptive Security Appliance Software Version 9.1(4) I have a stuck static route that I cannot remove from the device. I have tried clear configure route BGPDMZ:cerberus-01(config)# c...

Firepower Management Centre stops recording the user to IP mapping info and creates the ‘User Identity Dropped: User Limit Reached’ messages at between 17,000 and 18,000 users, this is nowhere near the 50k license limit for users.    

Hi Community,   I have a pair of ASA5516-X both with support contracts, and both are being managed by a virtual FMC running on VMWare.Now I have an issue with FMCv I need TAC support on, and I'm wondering does anyone know if FMCv is covered under the...

Hi Guys, We need to do Used based bandwidth limitation from CISCO ASA Firewall. CISCO ASA has the functionality to authenticate users and Bandwidth limitation quote (example 1 GB/Day). After that user got a message on the screen that user exceeds his...

Hello,  I am deploying a new vFMC 6.2.3 (latest) on ESXI 6.5.0 and upon deployment of the OVA file, i get a blank login page ( with the URL /login.cgi) . Tried different browsers as well. I have looked at this post , redeployed the VM multiple times ...

Assume you have a FTD/ASA HA with combined failover/state link and no IP addresses configured on any interface. What happens when Failover link turns down? I think the active/standby roles remain on each device. But what happens when active device ge...

I've got an ASA 5506-X with some the following commands on it from a previous administrator: crypto ipsec security-association lifetime seconds 3600crypto ipsec security-association lifetime kilobytes 102400000crypto ipsec security-association pmtu-a...

So I'm working on moving our citrix enviroment to our new building. However once changing all the ip's and updating the access list rules, it wasn't working. Doing the sh logging command, I see the following blocking the citrix traffic on port 8080: ...