Network Security

Hi, There is a web server hosted on internet nobody can access it from internet except allowed IPs.so we can access it from our prem but not from internet.we created sslvpn on Cisco ASA and added the URL of the web server as bookmark but it doesn't w...

I have imported L-AC-PLS-P-25 on ASA 5515, but now, the license displyed 250 license on Firewall, in my sense, L-AC-PLS-P-25 should be displayed 25 LIC on ASA, I am confused...May I know what is the reason of this ?  

Hi.   I have a question.   I config mgmt port 8305 but can't connect ssh or web ui.   If i change mgmt port 443 -> web connect but ssh not connect.   If i change mgmt port 22 -> ssh connect but web not connect.   How do I handle this?

A CA cert seems to be tied to my SSL VPN configuration that when a user connects it checks for this cert on their machine, how can I remove this validation since we are moving to MFA with DUO, I have machines that do not have certs that fail because ...

Hi, I have an ASA5510 running ASA version 9.1(6) and need to be able to ping it from the internet.  I've made these changes using ASDM (version 7.6(2)): in Firewall > Service Policy Rules > inspection_default > Rule Actions, I enabled “ICMP” in Firew...

So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement.    So I have a 5515-X. I had it setup easy enough as just a regular A...

I have an FMC that manages 6 SFR modules that in 5516's (not running FTD code).  ISP recently changed the public IP assignment on 4 of the ASA's so made the required changes on the ASA and confirmed working.  Logged back into FMC today to check somet...

Hello, I'm working on Analysis Intrusion Events on FMC.  I notice that a message "Internal_Event_Session_Add" is always there which shows TCP connection detected with many many counts.   After checking my IPS Policy, it said this rule is disabled. I ...

I have found some events of type Would have dropped in ASA-Firepower FMC logs. The guide explains The event type is always Would have dropped for packets seen while the system is pruning, regardless of deployment. [...]  the system sometimes prunes o...

Hi,I was tasked with installing Cisco FMC as a virtual appliance running on VMware.FMC would be configured and connected to our demo 5506-X HA pair devices. What are the steps I can take to obtain VMware ova file? Does it come with a trial license?An...

Hi Team   We need to manage the firewall in different geographical location with the management server(FMC) in our DC. My questioned are : - 1) what is the acceptable latency in ms is accepted to manage the appliance and pushing the policies ? 2) If ...

I'm having a confusing moment configuring static NAT with a Single IP address. I want to allow TCP-1723 traffic through to a server on the inside interface, while using a single IP address for this static NAT and PAT from inside to outside.    So for...

Hey guys, so last weekend I had a problem when implementing 2 Cisco 5508X ASA's.  I had the routes correct, the VLANs being trunked, mac addresses on the interfaces and even thousands of hit counts on my rule sets.  Only problem was that I was not ge...