Network Security

Why there's a [any any deny] implicit rule at inside interface? As i know inside int security level is highest 100 + stateful inspection why the software defaulted a implicit deny rule?

Hi,I've created in policy ASA (release 9.3) with SGT as source and destination, but in FTP (Firepower Threat Defense) I just find it as SGT source only.In FTP it is possible to make a policy with source and destination SGT? Thanks

Hello,   I have a new server on my dmz which needs external access to a public IP address outbound over tcp/2001 I also need external users to be able to hit this server externally inbound over https   I have setup an external dns called server.mydom...

Hi allWe are using ASA 5500-X firewalls with firepower services. They are installed and active in our network. During the FMC installation, default Access Control Policy is define with default action "Intrusion prevention: Balanced Security and Conne...

Hi Team,We are trying to scan the ASA firewall and getting the below error. Is there any way to resolve this issue? Please sugget.We did a security scan of Internal firewall and found one issue - "TLS Session Renegotiation Vulnerability"The TLS proto...

Hi All   Just a quick sanity check, basically the requirement is that we NAT all our traffic to 1 ip address when going over the vpn tunnel. The VPN is built on a natted source network of 192.168.1.0/27 , I have set a NAT rule to dynamically NAT all ...

Is there any documentation that states if a Cisco ASA fails open or closed.

Hai   I have problem with asa not allowing passive ftp directory listing .code 9.6.4 tried with and with  out passive command Also  with inspection and with out show conn TCP outside 217.160.123.90:65134 inside 172.18.14.27:52034, idle 0:00:04, bytes...

Hi Everyone, I am facing some weird issue where ping traffic works fine , however tcp/udp 5060 traffic fails. There are 2 interfaces configured as below - ASA/pri/act(config)# sh run int Ethernet0/2.1097 ! interface Ethernet0/2.1097  vlan 1097  namei...

Hello,   We are using the IPS module on the Cisco ASA 5525-X Firewalls and we’re running version 6.2.0.6. We would like to forward detailed logs to a Syslog server. We followed these procedures: https://www.cisco.com/c/en/us/support/docs/security/fir...

Good Morning   I have to migrate firewall Checkpoint configuration to a Cisco ASA 5585X device.   Checkpoint has many "accept", "drop", "encrypt" rules. But I could find some rules with action "Client Auth". By Client Auth rules, a user in an user gr...