Network Security

Hi, I had 5505 ASA back for 3 years and the box went fault. So we migrated to ASA 5516X with Firepower module which is running ASA version 9.8.2 and the older one had version 7.2. I am having an public IP to the firewall outside interface and it is b...

Hi,  I am just wondering, does my base policy such as Connectivity over Security intrusion rule will be in use if I generate and use Firepower Recommended Rules in my Intrusion Policy? Thanks

Hello,   My customer is running ASA on an FP4140 Appliance and is using ISE for posture assessment. Is there anywhere that has comments on ISE DACL scalability for AnyConnect VPN users? Is this like a switch where there is a limited amount of resourc...

Hi guys   So I have a Cisco ASA 5510 ver 8.4(2), behind a cable modem with a dynamic ip address.  I just need some help on how to configure this device, by the way, I'm new to cisco.  Thanks   Here is my config so far. interface Ethernet0/0 nameif ou...

Hello we have Cisco ASA 5506-x and would like to configure Cisco AnyConnect.    FTD image is 6.2.x    can anyone share the steps?

So I got my ASA back from the clock issue, finally now getting around to updating it. ASA 5506x Sec+. I got all the updates done, rommon, asdm, and fp module. Had issue with the update blocking my traffic, working past that.   Before I do anything el...

Hi All   We have a customer with a HA pair ASA5525 running ver 9.6(4)6 which when we login into the ASDM the cluster remains stable for about 10 to 15 minutes, then the Standby device will drop out of the cluster. The standby can be added back in and...

Hi everybody, I was watching yesterday the presentation of BRKSEC-3300 from Cisco Live 2018 - Orlando, and I liked what I've heard about Automatic Application Bypass (AAB). So, I've read the section "Configuring Automatic Application Bypass" (Link) f...

We recently replaced our firewall pair (active/failover) due to a clock issue. During this process one firewall (failover) had already died, so we decided to configure 1 of the new replacements as a failover and had the active (due to fail eventually...

Hello All I recently configured a cisco ASA5508x firewall at my workplace but can't work out an issue i'm having with the NAT rules.  We have a couple of external IP addresses which I want to NAT to a couple of internal servers depending on the servi...

Configuring site-to-site IPSEC VPN. In ASA, you're able to have multiple IKE policies but I don't see that option in FTD. It appears that you can only select one at a time.   I see the following text from the FTD 6.2 Configuration Guide: "IKE policie...

Really simple question for a newb:   I have a single web server that I want to share on a static IP.  I'll handle the ports via ACL instead of at the NAT level.   Inside Address:  webhost-in 192.168.28.11 Desired Outside Address:  webhost-out 1.2.3.4...

I'm trying to set up a virtual NGFW/FTD in our lab environment.  I wanted it to be a stand alone system and not have to set up a separate manager.  However, when I try to enable the local manager, I receive the following error: "This device does not...