hello，everyoneI am confused about two FMC policy Configuration problem，question one：on the advance config of the access control policy , As shown in the following figure:when I chose this option ,invoking intrusion policy on here ,is that mean intru...
Can someone please help me figure out why I can't ping from my Azure VM to any on-premises devices? I've added exclusions for ICMP in Windows Firewalls on both sides and can successfully ping from on-prem (i.e. 192.168.1.90) to an Azure VM (i.e. 10.0...
Hi, Does anyone know if PBR on the new ASAs to solve the following scenario? Or is there a better option? I need to send outbound SMTP traffic out to a separate physical port from the main one. I have a stateless security device that filters inboun...
I need to know for a client if the Cisco ASA 5506-X Network Security Firewall with Security Plus License is compliant with this security question: Does the agency ensure that boundary protection devices do not release unauthorized information if a ...
Hello I have a 5505 that I can't access the outside network from the inside. I can ping from the firewall outside. From inside connected to my laptop I can ping my gateway but can't ping outside or browse the web. I'm inspecting icmp and I set the DN...
I have a legacy PC (XP) running legacy software that has to be on the same subnet , however we need to put it behind a firewall. I put the ASA in transparent mode and assigned BVI1 an IP address. I need ports 4000 966 and 950 as well as letting a...
We have Firepower Management Centre 2000 appliances (Cisco part number: FS2000-K9) which manage Firepower SFR software modules which exist on Cisco ASA 5500-X series appliances. In terms of licencing: We are using Classic licencing (rather than Sma...
Hi, Just needing a clarification about PBR, I will be having 4 interfaces. 1 going to MPLS, another going inside and the last 2 interfaces will be going ISP1 and ISP2. I will be using ACL as my match clause however, I am having 2nd thoughts how to d...
Hi all, I am kinda new to Cisco ASA... and i have just recieved an alert from the monitoring team saying that there's an alert reading "High Transmit Percent Utilization>80% - on Adaptive Security Appliance 'outside' interface · Outside . So can so...
hi, it's my first time to do active/active code upgrade on a 5525-X pair (no FP module). i usually upgrade an active-standby FW pair. could someone advise their personal experience? is it the same upgrade procedure on a active-standby FW pair? any co...
Hello all, I'm setting up a second public IP block for a different DMZ server. When I ping the Nated IP (31.80.169.227) from outside I'm getting the log "No translation group found for icmp src.." on my firewall. Any ideas on how to fix this will b...
Hello everybody!. Is there a site where I can obtain a classification for the different logs? Depending on the event ID, I would like to know if a given log falls into a classification, such as: Attack, Denial of Service, Malware, Failed Attack, etc....
Hello! In my company, we have a Fortigate Firewall and we acquired a Cisco ASA 5516-X With FirePower to substitui the Fortigate I configured the ASA with de same conigurations of the Fortigate, but, when I changed the IP address of the Inside inter...
With forward secrecy in TLS 1.3, how is the FMC/FTD going to handle TLS 1.3 specifically with URL filtering? This is just around the corner, so I was wondering if there were any work-arounds as the FTD will not be able to pull the certificate from t...
