Network Security

Hi Everyone,  SecurityI am just curious if there is anything special that I need to do to migrate the Anyconnect using certificate besides exporting and re-importing the certificate?  I am getting a certificate validation error when trying to connect...

Hi Guys,   We are clueless already for this troubleshooting. We have FTD acting as an IPS and we are experiencing high CPU for some cores in random basis.   TAC engineer recommends to do flow profiling however, this have an interruption because SNORT...

Dear All,   We have 2 firewalls ASA5525 -X with firepower services. Our FMC is hosted on Esxi server. We have currently 1 policy with 3 rules which are below:    1. Apps Block 2. URL Blocking 3. Allow All Policy   My requirement is to give access of ...

Hi   Source is getting SYN,ACK from destination but rather than sending final SYN it sends Host Unreaachable.  Capture attached.   Kindly advise.   Thanks

I need help white listing 6 ips thru a single external IP to an internal server on the network to access a web based application (linux) I have attached a drawing of the scenario. Can anyone help me get this done? I have been using books, the web, et...

Hi,   I'm trying to upgrade Firepower Management form 6.2.2.1 to 6.2.3. I get an error each time that says : "encountered object ' at /usr/local/sf/lib/perl/5.10.1/SF/update.pm line 1534. ', but neither allow_blessed nor convert_blessed settings are ...

Hi all,   I am considering integrating NSEL with our SIEM.  We have already integrated our ASAs with our syslog server but I could see that there isnt clear visibility of traffic in our environment; hence thinking of going for Netflow. So I have a fe...

Hello, How to verify if network traffic is checked by IPS rules. I have set p a rule to inspect telnet traffic for root login from a specific host, but no event is generated when I telnet to a host with root login. ASA5512-x access-list sfr_redire...

Hello,   I want to change an existing policies in my FDT via FMC to another policies that i just created ? How can I do via FMC administration.   Kader from ALTICE-SFR

I have a problem with QoS which appears with all images later than 9.5.2, I don't have this problem with 9.5.2 or older images. I have two interfaces which look into the Internet (Outside_1 and Outside_2) and one interface which looks into a local ne...

Hi I have a 2 asa Firewall DMZ to set up, my question is i plan to put a switch between them is there any special config I need in order to route traffic through internal Firewall to external Firewall to Internet.??     Thanks

Dear All, I have a 5525x running in the network and have a 5510 in stock. Can we copy the configuration from 5525 to 5510 ? what is the better way of doing this? I dont have a smartnet for 5525 x , so it will be better if I keep the 5510 ready incase...

I am unable to route my internal Network through my asa5545. Here is a snapshot starting inside -> out. I have: 4 Trunked Switch -> connected to a Core Sw(which as 2 weight static routes pointing out)-> 2 FW (with F/O) all good here -> connected to 2...