Using ASA5506-X Kindly give suggestion possibility and license which will cover following. SQL injection prevention. (IP block) FTP access control / block on 3-5 wrong attempt Ransomware like attacks prevention. Log analysis ...report ... Preven...
Forum Posts
Hello, I've taken over a FirePOWER deployment from a predecessor and noticed that when following connection events, one of the useful fields for analysis is Initiator User, which is helpful to determine what user (based on agent communicating with ...
Hello Guys I have E-commerce server on the DMZ, needs to talk to DB server on inside E-commerce = 172.16.1.100 on DMZ DB = 192.168.1.100 on inside is the below correct object network E-Commerce host 172.16.1.100 object network E-Comme...
dear supporti have a problem recently, i have a 2811 router, there are several EIGRP VPN tunnel setup on it, recently i found this router running high CPU utilization, it almost reach 80 percent at the most day busy time, when i try to find what proc...
Resolved! ASA Packet inspection function
Hi All, I have a kind of basic question. 1)Firewall model -> Cisco Adaptive Security Appliance Software Version 8.2(5) 2)nat-control enabled 3)Inbound connection (initiated from the outside direct to inside) 3)regular static NAT configured static (...
I have a strange issue. Customer had 2 peer IP's configured in a tunnel: crypto map outside_map 1 set peer 1.1.1.1 2.2.2.2 The tunnel would establish fine to 1.1.1.1 but then it would eventually get torn down for this reason: "Peer Address Change...
Hey everyone. On Firepower it shows that my firewall is disabled. I think it could be due to the management IP address, but I'm not sure. Is the management ip on Firepower supposed to match the management ip that's in my ASA? In addition, whenever ...
Hi guys, I am about to pull the trigger on refreshing our old ASA's with 2110 FTD devices however I was just wanting to double check that they will support Site to site IKEv1 VPN to 3rd party equipment? (not sure if its cisco etc) I read on the fir...
Resolved! ASA vs Sophos
We are running a cisco 5510 and looking to upgrade it. Recently a company sale person came and give us a pitch for sophos 650 and wanted to sell us. I being using cisco product for long time and find them reliable and like the command line from switc...
When creating a site to site VPN on the FMC for FTD devices, is it possible to create a backup VPN for another site? for example if site A normally has a VPN to site B but should site B be unavailable can site C be configured as a backup? This doesn'...
Resolved! ASA 5505 Slow internet high CRC
I am experiencing slow internet connection. This week I upgraded my connection to 50/10 but when I run speedtest I am only getting 10/5 (which was my old speed). These are some of the commands I've run: sh int e0/0 Interface Ethernet0/0 "", is u...
Resolved! Syslog Server Log Format
Hello, We configured Syslog server on FMC and the intrusion even logs being forwarded from the FMC to the Syslog Server. In the Syslog Log Format, there is no interface information. May I know is there any way to configure the Syslog to contain the ...
When our IA team performed security scans, an SSL Self-Signed medium finding was discovered along with other SSL findings. How do I resolve this issue? We do not use a CA, just a generated cipher and cert by the switch itself along with all the other...
Resolved! FTD object creation automation
HI , I need to create an object with 100 network in it. Is there an easier way to automatically create the object (from an excel sheet) rather than do it manually ? Thanks
How can I prevent the threat-detection from blocking assess to an IP? I have disabled the basic threat-detection and have included that IP in the exception list. I rebooted the ASA to make sure that there everything is released from memory but whe...
