Network Security

Hi,   we are having multiple version of ASA version's like fwsm and Cisco asa.   when we are installing latest version of ASDM and java for asa for 9.8 we lose access to fwsm stating ssl handshake issue.   when we are installing lower version for FWS...

Hi, I had 5505 ASA back for 3 years and the box went fault. So we migrated to ASA 5516X with Firepower module which is running ASA version 9.8.2 and the older one had version 7.2. I am having an public IP to the firewall outside interface and it is b...

Hi,  I am just wondering, does my base policy such as Connectivity over Security intrusion rule will be in use if I generate and use Firepower Recommended Rules in my Intrusion Policy? Thanks

Hello,   My customer is running ASA on an FP4140 Appliance and is using ISE for posture assessment. Is there anywhere that has comments on ISE DACL scalability for AnyConnect VPN users? Is this like a switch where there is a limited amount of resourc...

Hi guys   So I have a Cisco ASA 5510 ver 8.4(2), behind a cable modem with a dynamic ip address.  I just need some help on how to configure this device, by the way, I'm new to cisco.  Thanks   Here is my config so far. interface Ethernet0/0 nameif ou...

Hello we have Cisco ASA 5506-x and would like to configure Cisco AnyConnect.    FTD image is 6.2.x    can anyone share the steps?

So I got my ASA back from the clock issue, finally now getting around to updating it. ASA 5506x Sec+. I got all the updates done, rommon, asdm, and fp module. Had issue with the update blocking my traffic, working past that.   Before I do anything el...

Hi All   We have a customer with a HA pair ASA5525 running ver 9.6(4)6 which when we login into the ASDM the cluster remains stable for about 10 to 15 minutes, then the Standby device will drop out of the cluster. The standby can be added back in and...

Hi everybody, I was watching yesterday the presentation of BRKSEC-3300 from Cisco Live 2018 - Orlando, and I liked what I've heard about Automatic Application Bypass (AAB). So, I've read the section "Configuring Automatic Application Bypass" (Link) f...

We recently replaced our firewall pair (active/failover) due to a clock issue. During this process one firewall (failover) had already died, so we decided to configure 1 of the new replacements as a failover and had the active (due to fail eventually...

Hello All I recently configured a cisco ASA5508x firewall at my workplace but can't work out an issue i'm having with the NAT rules.  We have a couple of external IP addresses which I want to NAT to a couple of internal servers depending on the servi...

Configuring site-to-site IPSEC VPN. In ASA, you're able to have multiple IKE policies but I don't see that option in FTD. It appears that you can only select one at a time.   I see the following text from the FTD 6.2 Configuration Guide: "IKE policie...

Really simple question for a newb:   I have a single web server that I want to share on a static IP.  I'll handle the ports via ACL instead of at the NAT level.   Inside Address:  webhost-in 192.168.28.11 Desired Outside Address:  webhost-out 1.2.3.4...