Network Security

How are you handling service allowance where wildcard domains are the only firewall configuration provided?  Specifically I am looking at a server that needs access to Microsoft PowerBI services.  I have attached the documentation provided by Microso...

Hello unable to access internet, packet tracer from inside to STC shows that packets allowed but still can not access internet. hereinafter ASA configuration.  ISP router connected to interface 0/2.   interface GigabitEthernet0/0 description ** LAN I...

hi, Anyone know if there's a official hardening guide for Cisco Firepower 4100 series platform ? I only manage to find guide for ASA Firewall http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/200150-Cisco-...

12 years as a firewall guy... and this is a first for me.I have a request to allow firewall access to an app that apparently uses tcp port 0.  I thought it didn't exist... but good-ol' google proved that wrong.  I did find this comment:  " Port 0 is ...

HelloI have 802.1x configured on my Cat 3560 switch stack. For the most part everything works fine but I keep running into users who have printers that go into sleep mode and then the port reverts to a dead default vlan99. When the user goes to print...

I am considering re-flashing my ASA5506 from ASA to FTD. I am reading that there is a license required for Remote Access VPN operation, but all documents mention SSL (or "Anyconnect"). Right now using the "traditional" ASA OS, my ASA has no problem r...

Does the aaa commands/configuration copy to standby firewall? I can't seem to get to my secondary ASA.   Message Text Failed-Attempt: Session Authorization encountered an error Failure Reason 15020 Could not find selected Shell Profiles Resolution Ad...

Hi all, I've searched the internet high and low and cant find a definite answer to this one.  With the old ASA's with the firepower modules is CTR+PROTECT licenses enough for the IPS to work and generate IPS events in the event viewer (adsm) or FMC? ...

So i am trying to connect a virtual PC into GNS3 ASAV using any connect.  Typically Anyconnect is never a problem for me, but now when I try to connect, it goes through all the motions.  It asked me do I want to accept the self signed certificate and...

  Sorry for my noob question, i have a config below from 8.2   access-list NO-NAT extended permit ip 10.0.0.0 255.0.0.0 10.172.8.224 255.255.255.224  nat (inside) 0 access-list NO-NAT     FW# packet-tracer input inside tcp 10.3.3.3 443 10.172.8.224 $...