Network Security

hi  all, I need help. when i reload the asa and upgrade the version 9.9.2.1. The memory is also high compare before. SHZT-Test-5F-FW# show processes memory //such processes are high   3269725     1382260931            438394      14255590            ...

Hi     Has anybody done Migration from vFMC to FMC Appliance?     Thanks  

Hi all! I'm trying to understand why the keyword "default" in the ACL is needed.   R3(config-ext-nacl)#? Ext Access List configuration commands: <1-2147483647> Sequence Number default Set a command to its defaults deny ...

Dear All,   Please guide me on below query                             Server 10.1.1.1                                     |                                     | dmz R3-----outside----ASA-inside--------PC-B Internet                        |         ...

Hello, I have a site-to-site VPN between two remote sites which is working as expected. LAN subnets at both sites are allowed for access over the VPN. I would like to be able to access the remote site when connecting remotely via AnyConnect to the lo...

I have a FP2110- 6.2.2 with 2 sub-interfaces (vlan11 and vlan99) on physical interface 2. I have a C9300 connected trunked to the FP and have a 2 laptops connected to switch ports that are assigned to the vlan 11 and vlan 99.   FTD vlan 99 - 192.168....

hello,    I have 3 interfaces configured on my asa version 9 (inside1, inside2, outside)   I can reach internet  from the two interfaces, but i can't reach the  inside2 interface  from the inside 1 interface   I have this error in the asdm logs "Fail...

I currently have a deny rule for one of my interfaces. When selecting this rule in the asdm and selecting logging the window pops up with the filter selected for this rule. The issue is that not all the deny hits are showing up in the logging window....

Hi All I am having issues bringing up a vpn between an ASA and a Checkpoint firewall. I am using the normal settings that we use to connect on our others but this one fails to come up. I can see all the phase 1 proposals sent through, approx 10 sets,...

Hi guys, I am planning to upgrade my FMC which is deployed in HA mode. Just thought because based on the process, I need to pause the sync of 2 FMC, do I need to upload the upgrade image to both FMC nodes or uploading in the Active FMC before pausing...

How much time does it take to update security patches and/or update the software for the FMC? Is there any other source of information from CISCO (https://tools.cisco.com/security/center/publicationListing.x) to verify the bugs or vulnerabilities rel...

Hi guys,   I need your input about this design scenario. I want to break current 3850 stack into 2x 3850 separate units and add HSRP between them. On each ASA failover pair I will monitor interfaces connected to the HSRP switches. Routing wise I am u...

Hi everyone.I have a problem: 2 asa 5512-x in failover and dualwan mode. 5512 has 15 IPSec tunnels are configured with asa 5505 and 1 with routerboard(mikrotik) for testing. Software version on 5512x asa912-smp-k8.bin, and 5505 asa901-k8.bin. There i...

Are we going to provide the capability to limit users time to certain websites via a specified quota in future releases of the FMC/Firepower Appliances?   Example: The Marketing Group can access Facebook for only 1 hour a day.