Network Security

Hello,   I am working with a customer that want to use the URL filtering function in his ASA 5545-X with firepower services. I have a similar setup in my LAB for testing purpose and I have create a SSL Policy that are using a Microsoft CA signed cert...

Dear All, I want aggregate report of all users activity. Can firepower do that?   Thanks.

Hi,   I have recently see this syslog message on my ASA5555: %ASA-3-199015: Dec 8 05:18:55 lina: DATACORRUPTION-DATAINCONSISTENCY: Copy error -Traceback= lina lina+0x33a812d lina+0x3377a5b lina+0x3378b4f lina+0x337aba7 lina+0x193f7b4 lina+0x2939c09 l...

Hello experts,   Any input from you guys would be greatly appriciated.    I have two ASA 5545-X in an Active/Standby failover. I configured Remote Access VPN and tried to install the AnyConnect APEX license on both units. I am getting the below error...

I have very limited knowledge in the area of switches... but strong expertise with computers in general.Our SRW2024 switches were configured several years back, and somewhere along the way someone set and lost the passwords.How does one go about rese...

Hi,   I have one computer on the local network, and it needs to be available local and public so I crate:   object network x.x.x.x-10.1.4.157host 10.1.4.157nat (inside,outside) static x.x.x.x dns   College add entry to DNS (only public IP) and I am u...

I have cisco ASA 5510 and am using ASDMI am new to ASA and  am trying t understand on what to do for the below 1. I have public ip 4.79.205.89  ---------> FW------> 192.168.10.1 ( Apool interface )for this to work would i need an Access rule and NAT ...

Hi all,   I'm running an ASA with 9.8(2) and I have a IPSEC tunnel with another device. The other device (pfsense) fragments ESP packets in order to fit the MTU, but the ASA does not seem to allow ESP fragments to go in, does not reassemble them and ...

I have a comcast business modem/router 71.194.1.31 (public) with internal address of 10.1.10.1. My firewall "PIX" outside interface is 10.1.10.3 with all routes going to 10.1.10.1. The modem/router is performing no static route function.   interface ...

Hi,I'm responsable for an permiter design with one of my customers.The situation i designed it is included in the attachement.The question i have is. I have 4 interfaces on an asa 5510, First line of defense and we need 2 dmz zones. I can use 1 inter...

Hi,    Cisco confirmed in their doc that Dynamic RRI applies to IKEv2 based static crypto maps only. See link below https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/vpn/asa-98-vpn-config/vpn-ike.html   However, when I configured...