Network Security

Hello All,   We want to perform an  upgrade from version 9.1(3) to 9.8(2)28 on a failover pair, have read that it is not possible, has anyone done that before? If not possible what should be the path to follow to get 9.1(3) to 9.8(2)28?   Thanks in a...

Hi guys,   Can someone explain me some few things? what is the difference between " asa5506-k9 " and " asa5560-sec-bun-k9" ? I mean, the first have not the Sec.plus license but, what can i do only with the first product? what offer to me more the sec...

I have a Cisco RV320 that I am trying to block certain websites with. One of the main ones if Facebook. I have facebook.com and https://facebook.com added under the Forbidden Domains Table, and facebook added under Website Blocking by Keywords Table....

Hi,   We are having an issue in ADSM. Its a ASA with firepower. Well, going to ASDM security rules, we click on a security rule-> "show log".  But we can not see any logs about this rule, but there are connections matching. We have a syslog configure...

Hello Everyone ,   I try to publish a website from a server range , so i Make an autonat static  nating on the firewall data-center but it didnt work and the internet connection on this server has been stopped !! Note *the firewall used on both firew...

Hi Community,   On our ASA 5508-x firewall, we have a requirement to take Broadcast traffic in one of the interfaces with security level 100 and place it on the outside but as multicast and on specific port.   The questions is: is IP multicast helper...

I need some confirmations about code versions.  Maybe someone can provide confirmation for me on the following:  We have a mixed environment at this time with: - Cisco ASA devices running ASA code - Cisco ASA devices running ASA code and SFR(firepowe...

So I am currently trying to get my IPS to generate events for when executables are downloaded. I have went in to my intrusion policy, enabled the rule for executable downloads to generate events and set the threshold for 1 count every 10 seconds. I a...

I have 2 ASAs in a active/standby failover cluster.  They are running in Multi Context mode.  Currently, there are no interfaces shared between contexts.  All contexts have sub interfaces of a port channel allocated.  However, now I have a few contex...

Hi,   I have a topology:   INSIDE: 192.168.1.0/24 OUTSIDE: 200.200.200.1/27 DMZ: 192.168.200.0/24   INSIDE hosts are NATed to OUSTIDE ip address (200.200.200.1) In DMZ  I have a server with address: 192.168.200.200 wich is NATed to 200.200.200.2   My...

Hello,   I bought two ISPs. now i want to forward traffic generate from 192.168.90.30 to ISP 1 and rest of the traffic from ISP 2. I have tested static route, PBR, But nothing work. ALL traffic go through ISP 2.

Hi,   I have a ASA 5520 firewall as a boarder of our network to one of our client.   Recently, the outside interface of the secondary unit keep testing and keeps pass. I got the email from the firewall a few times a day. there is no obvious network d...