Network Security

Hi All   I have the following topology   Internet     | Cisco ASA     |  Core Switch------------Router1----Backup Internet     All  my traffic goes out through Cisco ASA but I want only certain traffic (for example) telnet traffic to go through backu...

Hello,   I currently have an ASA that has a default route out to a service provider (extranet with RFC1918 addresses plus some limited RIPE addresses).  The network will be changing in the future and I need to swing that default route elsewhere.  The...

Greetings,   I am unable to ping from my wlc (built-in-wap) to my any of my firewall segments.  I can get dhcp to work to assign me an ip from the range for my dhcpd but I can't get the connectivity to internet as it drops or says it should pass it i...

I have this config but kids with Kali can enter in the Aironet and access admin network. What im doing wrong? Is any way of resolve issue withou more hardware?     Router#sh run Building configuration...     ip dhcp excluded-address 192.168.2.1 192.1...

We just cannot get Firesight to be user aware at all. I can match logon events from the DC, to the SF User Agent to traffic being processed through the SFR module, and have it either hit my unknown/Anon user rule, or be denied based on no identity. I...

Hey friends,   I recently published a blog article that extensively covers Address Translation on the Cisco ASA / ASA-x Platforms (code versions 8.4+). This guide will take you from knowing nothing about configuring NAT on an ASA to being able to con...

I have configured following policy but traffic is not redirected to SFR module so that's why i couldn't monitor any traffic at FMC! i think every thing is OK if only the traffic redirects to SFR module ! Service-Policy used ==========================...

I had a customer to wrote me saying that he is trying to install their updated license on their FMC and since they do not have FTD running, nothing is showing up their licensing portal.   can someone please assist me on how to help this customer inst...

I am slightly new to the FMC product and I have learned to do things like policies and device administration. Now I am looking at how to see what is going on. I created a policy on a new set of ASAs/SFRs that is in "monitor" mode because I want to se...

This is an ASA 5506X running 9.8(3). I need to change the IPv6 DUID to accommodate a prefix-delegation problem with my provider and, unfortunately, I cannot find any DUID related commands. Google doesn't turn up anything helpful either. Does anyone k...

Hello Friends,   I am using Cisco asa 5512 on 9.8.2. due to recent security measurement we have enabled TLS 1.2 with custom ciphers.   However, SSL LAB shows there is no support for secure renegotiation.   I wanted to know if asa support this feature...

Hello,    I have a cluster of CISCO ASA 5545 running on failover Active/standby mode.  The current version is 9.6.3.1 which appears to be vulnerable to some recent Csvs.  Can you please help me decide to which stable and clean version should i upgrad...