Network Security

Attempting to establish tunnel to Palo Alto keep getting failure:    Received encrypted packet with no matching SA, dropping   My cisco crypto map entry: crypto map outside_map 115 match address outside_cryptomap_115crypto map outside_map 115 set pee...

We have an Active/Standby configuration with 2 ASA5506X's with ASA version 9.6(4)17 and ASDM Version 7.6(1).  We have stopped subscribing to Firepower because every once in a while, Firepower basically brings the throughput of the network into single...

Dear all, We received a new 5525-X appliance this week and after verifying that it powered without issue on the bench, I racked it and began applying a very basic config to test.  I decided to setup the FirePower (SFR) module via ASDM but found that ...

Hello everyone   We are planning to replace for one of our customers the ASA 5520 firewall with the Firepower 2110. The customer is using on the existing firewall (ASA5520) a CWS connector.    Will be possible to use on Firepower 2110 the same licenc...

Hi, May I know how to get the serial numbers of the power supply modules connected to the sensor using the CLI? Thanks

Hi Everyone, I am in the process of setting up ASA for home lab . In the process have attempted to configure inspection of icmp traffic and was following a doucument I  got online. At a point,   when enter                         class-map type inspe...

Hi folks,   at one of my customer´s sites I was confronted with a split brain ASA failover situation. Unfortunately the SFP of the failover link was broken. Both firewalls did not "see" each other while the failover link was broken.   I did not find ...

Hi all,   today I had the Problem that my ASA FW cluster told me: Lost Failover communications with mate on interface xvc   Fortunately, it also told me:  Testing Interface xvc Testing on interface xvc Passed   Also, when i checked the Status etc., e...

We're deploying two 5516Xs tonight, and I had taken for granted the config because I couldn't pre-assign IPs because they will be replacing our current firewalls that use the same IPs.   So I've held off until today, and now we're staging things and ...

Dear Team, Currently we have two Site to Site VPN Connections between HO (Cisco ASA 5515-X) and Branch office(Fortinet). ISP 1(HO) Connected to ISP 1 (BO) ISP 1(HO) Connected to ISP 2 (BO) We need to achieve Redundant auto fail over of Site to Site V...

Hello,   I'm trying to configure a firewall rules that allow the dcerpc communication between my Active Directory server and Domain Computer.   I've got some problem to push GPO from the AD because it use rpc port (port n°135) but after use a new por...

How can I put the source port (src-port) as any in the below ASA command instead of specific port?    packet-tracer input ifc_name protocol src-ip src-port dst-ip dst-port   packet-tracer input outside tcp 192.168.10.10 3389 172.16.10.10 3389   cisco...