Network Security

Good Day all, I have ASA 5520 running Ver. 9.1 i tried to configure NAT  for this IP's  OUTSIDE IP 10.50.20.170 255.255.255.0 INSIDE IP 192.168.88.2 255.255.255.0 the question is how to make the NAT configuration that the INSIDE can use the OUTSIDE I...

I have purchased an Cisco AP here of model "AIR-AP1852I-E-K9". I do not have a controller, so I would like to access the APs and configure them one by one manually. I now have a problem with configuring this unit. Whatever command I type in gives ...

Hi, There is a web server hosted on internet nobody can access it from internet except allowed IPs.so we can access it from our prem but not from internet.we created sslvpn on Cisco ASA and added the URL of the web server as bookmark but it doesn't w...

I have imported L-AC-PLS-P-25 on ASA 5515, but now, the license displyed 250 license on Firewall, in my sense, L-AC-PLS-P-25 should be displayed 25 LIC on ASA, I am confused...May I know what is the reason of this ?  

Hi.   I have a question.   I config mgmt port 8305 but can't connect ssh or web ui.   If i change mgmt port 443 -> web connect but ssh not connect.   If i change mgmt port 22 -> ssh connect but web not connect.   How do I handle this?

A CA cert seems to be tied to my SSL VPN configuration that when a user connects it checks for this cert on their machine, how can I remove this validation since we are moving to MFA with DUO, I have machines that do not have certs that fail because ...

Hi, I have an ASA5510 running ASA version 9.1(6) and need to be able to ping it from the internet.  I've made these changes using ASDM (version 7.6(2)): in Firewall > Service Policy Rules > inspection_default > Rule Actions, I enabled “ICMP” in Firew...

Hi all, I need to make a copy from cisco asa to TFTP moreover add information of the timestamp in the name o of file like this: tftp://192.168.25.25/switch0--Aug-30-2018-14-45-52.571-GMT.cfg-1 This example above is configured in the switch but I cant...

So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement.    So I have a 5515-X. I had it setup easy enough as just a regular A...

I have an FMC that manages 6 SFR modules that in 5516's (not running FTD code).  ISP recently changed the public IP assignment on 4 of the ASA's so made the required changes on the ASA and confirmed working.  Logged back into FMC today to check somet...

Hello, I'm working on Analysis Intrusion Events on FMC.  I notice that a message "Internal_Event_Session_Add" is always there which shows TCP connection detected with many many counts.   After checking my IPS Policy, it said this rule is disabled. I ...

I have found some events of type Would have dropped in ASA-Firepower FMC logs. The guide explains The event type is always Would have dropped for packets seen while the system is pruning, regardless of deployment. [...]  the system sometimes prunes ...