Network Security

Hi all,   I'm running an ASA with 9.8(2) and I have a IPSEC tunnel with another device. The other device (pfsense) fragments ESP packets in order to fit the MTU, but the ASA does not seem to allow ESP fragments to go in, does not reassemble them and ...

I have a comcast business modem/router 71.194.1.31 (public) with internal address of 10.1.10.1. My firewall "PIX" outside interface is 10.1.10.3 with all routes going to 10.1.10.1. The modem/router is performing no static route function.   interface ...

Hi,I'm responsable for an permiter design with one of my customers.The situation i designed it is included in the attachement.The question i have is. I have 4 interfaces on an asa 5510, First line of defense and we need 2 dmz zones. I can use 1 int...

Hi,    Cisco confirmed in their doc that Dynamic RRI applies to IKEv2 based static crypto maps only. See link below https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/vpn/asa-98-vpn-config/vpn-ike.html   However, when I configured...

Hi,   We have purchased four Firepower 2100 firewalls and we are using ASA software. We are having confusion with Smart licensing. When we registered our ASAs, it just displayed as ciscoasa in the web dashboard. However, one of them registered with t...

Hi Guys Pls Find Attachment FMC upgrade error , i added all info in the screenshoot Kindly Advice thanks all

Hi Guys pls find Attachment How to fix this without upgrade my FMC to 6.2.3  Thanks

Dears,   on of our customer need to upgrade the firewall to ASA 5516-X with FirePOWER services and using vpn third party software called NCP VPN Client web site is https://www.ncp-e.com/en/service-resources/download-vpn-client/   so this software it'...

Greetings I'm trying to understand why our FMCv is so slow to operate. I've had a TAC on the issue but the technician wasn't very straight wether or not I have a hardware design issue or if there is something that needs to be optimized on the FMC. So...

There  may be something wrong with the firepower because the physical port is not active when connected directly. I'm going to restore the firepower. But it cannot be restore in the firepower command. How can I exit the firepwer os?

  I have some queries,     We are going to implement/insstall a new Cisco ASA 5506-X Configuration device in our environment: Requirement: We have 1 vodafone ISP link with public IP (50.50.50.1/30- Lets assume) that would drop on outer interface o...