I have the need to harden 3 legacy servers and the ASA-5505 was picked for the solution. I want to start by allowing traffic pass and then add ACL's to gradually increase the security. The ASA will be in the middle of the network, that is why I like ...
Trying to figure out how to create a U-Turn so that a web server we have on our DMZ is accessible to all hosts (whether on the inside or another host in the DMZ) via its public IP. See attached crude drawing. We have split DNS for this particular ...
Hey I was recently put in charge of our Firewall which I have very little knowledge of. We're using FMC and I need to setup logging (detect portscans/bad applications/system login attempts(ssh/web)) etc, I've been trying to google but I cant find any...
I'm trying to do an update on a Firepower Management Console (Virtual Machine running on Linux KVM) for version 6.2.1 to 6.2.2 I have started the Readiness check for the update and it ran for about 2 hours and produced the following error: Readin...
Hi, I have a question regarding rules update, from what i read in the manual, rule update will provide new/modified some base rules and settings. is it possible to revert back to old rule update in case the new update have some impact to current netw...
This isnt ment to be a flame thread. During a security audit our vendor said that the Cisco IDS's we use are not really that good and we should move to SNORT.Is SNORT a good product to use in conjuction with the Cisco IDS or just by itself replacing ...
Hello, we're seeing input errors and overruns on mainly 2 interfaces that are apart of a port channel on our ASA. Our load balancing on this device is Source and Destination IP. I'm wondering if I should change this as when we do backups these inte...
Hi Everyone, During our maintenance window i need to delete few interfaces from ASA.In ASDM when i filter by these interface names i see many acl configured for these interfaces but ACL have different name as compare to interfacename.If i delete th...
Hi, just wondering if I remove a sensor or FTD in FMC then re-register it again will the firepower config in the sensor or FTD will be lose? Or is it everytime a sensor or FTD re-register to a FMC the FP configuration is gone? thanks
I work for a K12 school district. I need to block the VPN clients students use on their personal cell phones to avoid web filter restrictions. I am able to block most apps however not all. There are 2 that I need help blocking. I don't know how o...
Hi all, I've got a Cisco 2811 router running 15.1.4 with an SDM configured ZBFW. Behind it there are ATAs connecting phones to a cloud-based VoIP service provider. So no CUCM or CME on the router, just pass-through SIP registrations to the SP and t...
Dear All, I have been using Cisco ASA 5510 for last 7-8 years now the requirement is to upgrade to IOS so that the current firewall supports advance encryption schemes. Currently i am running Cisco Adaptive Security Appliance Software Version 8.2(5...
Hello everyone! I have Cisco ASA5506-X (ver. 9.8(2)20, asdm 7.9(1)151) on my remote site. I want to setup VPN access with authentication from Active Directory. I want to use AD passwords for auth in ASDM and SSH (if it fails use LOCAL) also. I alread...
Hello Community, I'm Having a really weird problem. Trying to install the pre-install 6.0.0 package on the Management center, I got the message: "Update Installation Failed : [%] Fatal error: Update to version 5.4.1.5 is not complete. Please compl...
I would like a way to monitor the current throughput / bandwidth going through my AnyConnect VPN. Ideally I could get a value (say in bytes per second), and then submit it to my existing dashboard / alerting tools. I would even settle for aggregated ...
