Network Security

I am getting deny reverse path check errors when trying to host a TCP service on the firewall that has two ISP links. Trying to host the service on ISP-2 IP range while the default route on the firewall is through ISP-1. Using route-map to route the ...

I need to update my sfr module for Cisco ASA 5512, I also have FMC from where I will update my sfr module. I need to know that if I update the sfr module software version via FMC will the SFR updated image be saved in FMC memory or will it save in AS...

Hi,    I want check my internet usage.How to calculate that in ASA firewall.

I am using ASA 5506 with version 9.6 , can I configure DHCP with mac address binding . If yes please sample configuration commands Thanks for answers in advance!

We are migrating from an ASA to Firepower and we're running into an error when configuring NAT.  One of our networks is PATed out a secondary IP on the outside interface.  That same secondary IP is also used for a couple of static NATs.  On the ASA, ...

Hi, I am installing AMP for endpoints in 90 servers. How can I estimate how much bandwidth will be consumed?   Thanks!

Hi All, I have a 2120  running in FTD mode with the IPS and AMP licenses and an FMC all on version 6.2. I setup the IPS and AMP (file policy) based on the configuration guide.   On my Access Control Policy I do have both the file policy and IDS check...

Hello,I'm working with one of my customers to fix an issue they are having with some new FTD devices they just brought online. They've found that syslog log messages are coming up with the wrong name from the new FMC FTD devices. When attempting to c...

If I create a hierarchical IPS policy set, for instance:   IDS-ROOT w/ a base policy of Balanced Security and Connections IPS-ROOT w/ a base policy of IDS-ROOT   and I run Firepower Recommendations on the IDS-ROOT policy, do they trickle down to the ...

Hello, I currently have the following configuration set on my ASA and would like to know if this is set up properly.  I understand you can specify policy-map types and class map types but don't see/know how to apply these to an interface.  Can I get ...

Hi,   We have 2120 and 4110 series FTDs last month we upgraded 6.2.2-81 to 6.2.2.2-109. Prior to this I check Cisco recommended upgrade path was 6.2.2 > 6.2.2.x   After upgrading a pair of FTD 4110 in HA, the primary device now shows a "failed" state...

Hello, We've started using Azure and have a few subnets and VMs in there and I've been asked to size and cost the Cisco ASAv but don't know where to start.  The Azure Marketplace does offer to much help either.   Has anyone done this before?   Thanks