Network Security

Hello everyone ,   He facing a curious problem with Cisco ASA 5508 FTD 6.2.3 . We have setup FTD and we facing problem from specific 3 endpoints that are not able to open specific sites . We do not do any policy on URL neither on IPS for specific net...

Hello,   I'm curious to know if there is a way to block applications that have been classified by NBAR2 using zone-based firewalls on the ISR platform.   Here's what I was thinking:   class-map match-any CM match protocol bittorrent match protocol bi...

Hi guys, i just read in FP documentation that bypass mode will have a few packet drops when the FP chassis has been rebooted? Is that true and what is reason why it will have few packet drops? Thanks

Dear Team, Tomorrow customer licence will be come Please guide me & share the link. How to renew firewall licence step by step please guide with proper step.   Model No :- ASA5506-K9 Serial No:-JMX2133YODX   Thanks & regards, Sachin  

Attempting to establish tunnel to Palo Alto keep getting failure:    Received encrypted packet with no matching SA, dropping   My cisco crypto map entry: crypto map outside_map 115 match address outside_cryptomap_115crypto map outside_map 115 set pee...

We have an Active/Standby configuration with 2 ASA5506X's with ASA version 9.6(4)17 and ASDM Version 7.6(1).  We have stopped subscribing to Firepower because every once in a while, Firepower basically brings the throughput of the network into single...

Dear all, We received a new 5525-X appliance this week and after verifying that it powered without issue on the bench, I racked it and began applying a very basic config to test.  I decided to setup the FirePower (SFR) module via ASDM but found that ...

Hello everyone   We are planning to replace for one of our customers the ASA 5520 firewall with the Firepower 2110. The customer is using on the existing firewall (ASA5520) a CWS connector.    Will be possible to use on Firepower 2110 the same licenc...

Hi, May I know how to get the serial numbers of the power supply modules connected to the sensor using the CLI? Thanks

Hi Everyone, I am in the process of setting up ASA for home lab . In the process have attempted to configure inspection of icmp traffic and was following a doucument I  got online. At a point,   when enter                         class-map type inspe...

Hi folks,   at one of my customer´s sites I was confronted with a split brain ASA failover situation. Unfortunately the SFP of the failover link was broken. Both firewalls did not "see" each other while the failover link was broken.   I did not find ...

Hi all,   today I had the Problem that my ASA FW cluster told me: Lost Failover communications with mate on interface xvc   Fortunately, it also told me:  Testing Interface xvc Testing on interface xvc Passed   Also, when i checked the Status etc., e...

We're deploying two 5516Xs tonight, and I had taken for granted the config because I couldn't pre-assign IPs because they will be replacing our current firewalls that use the same IPs.   So I've held off until today, and now we're staging things and ...

Dear Team, Currently we have two Site to Site VPN Connections between HO (Cisco ASA 5515-X) and Branch office(Fortinet). ISP 1(HO) Connected to ISP 1 (BO) ISP 1(HO) Connected to ISP 2 (BO) We need to achieve Redundant auto fail over of Site to Site V...