Network Security

I need some information about the output from the sho conn command on my ASA 5506-X.   The output looks like    TCP outside: 64.74.17.129/443 (64.74.17.129/443) inside_2: 192.168.1.10/57595 (62.128.198.254/57595), flags UxIO , idle 11s, uptime 2D23h,...

Hi all, with network topology descrived in this topic:   https://community.cisco.com/t5/firewalls/asa5506-x-enable-comunication-between-vlans-and-remote-managment/m-p/3391711   2x isp routers for internet access with dhcp on lan interfaces and 2 diff...

Hi,   We have configured email alerts to send two mail address in our company. Only one of them is receving these mail alerts, but not the another mail account. The relay host is the same for both mail address. So we dont know we are not receiving th...

Working on a network where the 5506's outside interface is w/in a /26 (ASA is A.B.C.32 w/ a default gateway of A.B.C.1, which is the ip of a router internally).  The /26 is broken down in a way that the users of the ASA (org 1) are allowed to use .32...

Hello, Gents, just I wanna to know if it works, Static Virtual tunnel interface with IPSEC ikev2 between to ASAs? since I read before in article this function an in Cisco IOS only,   can you plz advise as well provide me with an article to make this ...

Folks,              We are implementing site to site VPN with NAT since there are overlapping subnets. is there issues with SNMP polling and traps that i need to worry about since i am natting?

I am looking to understand if it is possible (and how) to implemented traffic policing on a per user (or per host) basis on a Cisco ASA 5525-X with FirePower Services running v9.8 software?   We can do this kind of thing on our wireless controllers, ...

Hello,   I bought an ASA5506-X, and I am not able to access ASDM. SSL Error: ERR_SSL_VERSION_OR_CIPHER_MISMATCH   I use command   show ssl ciphers all   and show only those two.   DES-CBC-SHA, NULL-SHA   How to add others?

Hi We want to deny all outbound web access except to a group of about 10 whitelist URL domains on an ASA 5525-X with FirePOWER services. Is it possible to do this on the ASA without an add-on FirePower license? Will this have a significant performanc...

Hello,In an ongoing cat and mouse game, we're trying to filter out using proxies and sites that bypass web filtering. Since it's impossible to block everything, I'd like to do some regex filtering to look for keywords like "bypass", "proxy", "youtube...

Hi Guys, Is it a best practice to whitelist the VA scanner in the IPS because I noticed that my IPS generate an alarm during the VA scanning to my other system across the IPS. Thanks

Hello   For one of our customer using ASA 5516-X with FTD 6.2.2 managed by FDM. I created a Access Control policy to block the custom URL (eg. youtube.com) from inside to outside and kept it on the top at position #1 and the allow all policy next to ...

Hello   For one of our customers, we would like to replace the existing ASA 5520 firewalls with the Firepower 2110.    The requirements for the new firewalls should be the following :  The new firewalls should be in HA (Active-Standby) They will be a...