Network Security

Hi   I'm currently migrating a customer from ASA to a FP2110 using Firepower Threat Defence. As we're probably all aware DAP (Dynamic Access Policies) are not yet supported on FTD, but i was wondering if anyone else has any idea or workaround to impl...

I have two Cisco ASA 5545 firewalls.  I am having a problem where every month or two the primary ASA fails to where it blocks all outbound traffic.  The fix is to manually fail over to our secondary ASA, which then allows proper traffic flow. I reali...

I bought ASA5506X then I set up PAT translated to outside and set up firewall policy to allow outbound to 8.8.8.8 and AWS.amazon.com FQDN and set up dns 8.8.8.8 and for inside_7 true then I connect eighth port which is inside_7 to wifi internet port ...

Hello all,    I have a problem with accessing my ASA from the Cloud server(Microsoft Azure), i installed the ASDM Launcher on the cloud server which i create a vpn tunnel between it and my network.   PC --- Switch --- ASA --- VPNCiscoRouter --- Cloud...

Hello All,   I'm new to Cisco. Recently, I have come across an issue, when I was building an L2L IPSec VPN tunnel between Cisco ASA and Checkpoint(Peer), I have removed the existing policies on the IKEv2 Phase and added my customized profile. My work...

Hi all,   Haven't been able to find an answer to this online. I'm looking to move the VM host that my FMCv is currently on to our DR site.   During the FMC outage will RA VPN users still be able to authenticate to our radius server, or does the FTD d...

I see that Snort has 8 different logging levels: logging level {alert | crit | debug | emerg | err | info | notice | warning} What are the differences between them?  I did find a listing related to Snort Web Filtering that states: Level Description 1...

Ok I am not sure how to do this because I never have done it or needed to do it, but now is that time.   I have a layer 2 port-channel set to trunk on a 4500x that connects to a ASA5515x. The 4500x has vlan interfaces and these vlans are allowed on t...

Hello, I was wondering if someone can help me figure out what's happening. I'm a bit confused by it. I have a process where an inside host (192.168.2.244) is reaching out to a host (1.1.1.1) on the internet (inside host PATing to 9.9.9.9.) Of course,...

Hi Everyone,    From AWS Marketplace i bought CISCO ASAv ( https://aws.amazon.com/marketplace/pp/B00WH2LGM0) , want to setup Cisco Anyconnect.  To setup this i need pkg files Linux,mac and windows (https://software.cisco.com/download/home/286281283/t...

I have set up a lab with a fully licensed ASA+FP device in front of a TLS enabled SMTP server. Created a rule to decrypt SSL traffic using its own certificate+key, to a set of TCP ports to this SMTP server IP address. I also turned on file detection ...

Hi guys,   I want to migrate current STATE and FAILOVER physical connections from using switches in between to direct cables. I read some design concerns and ack that tshoot event troublesome.   Now I have a dedicated Port-Channel for failover and an...