Network Security

Just setting up my first instance of FTDv in AWS.  But for the life of me I can't figure out how to get the outside interface to reach the Internet.   I've got my Internet Gateway and all my other EC2 resources don't have any issues.   Looks like it'...

Hello i have some suggestions about Packet tracer. I think that the packet Tracer should be implemented the devices that can simulate also attack. attack on switch, routers, ios, firewalls, IoT devices.i can explain with for example: after we finish ...

Hi everyone,   On my ASA, I've met a strange issue about PING. Let me show you the config:Zone ADM: security-level 100, VM-net-device=192.168.1.1Zone MGT: security-level 100, VM-NMS=172.16.1.104ICMP echo, echo-reply, unreachable are allowed in both z...

Not really sure how to read this compatibility matrix for Fuji but can anyone help me determine if my switch is compatible? I am currently running 16.3.6. I saw that the new Fuji (16.8.1) version came out on the 6th. Compatibility Matrix posted below...

I'm not sure if this is by design.  Anybody else run into this?   After re-image FPR2110 from FTD to ASA9.8.2, the chassis (FXOS) mgmt interface UI become "Forbidden- you don't have permission to access / on this server"     https://mgmt-ip   SSH int...

Hi Guys,   I have two ISR and two FTD firewalls connected directly with each other with redundant links (triangle shape). My question here do I need to put a L2 sw between FTD and ISR instead of directly connection? Is it healthy to do this? Or not n...

Greetings,   The topology is a MPLS network. NAT is done on the edge network-based firewall before the traffic goes to the Internet. Each remote site on the MPLS has its own router. The site in question also has an ASA 5510 that sits behind the rou...

is anyone aware of a URL filtering category containing Crypto Mining URLs?   I have a huge list of crypto mining URLs that I want to block, and a bout 90% is not listed and/or has not reputation. Keen to get some input

Hello! Is it possible to have different block response pages for different subnets? For example custom response page for endusers and servers... Or perhaps it's possible to use response page only for specyfic subnets?

Is the main difference between FPS and FTD that with FTD as far as management of the ASA goes that object/ACE creation will need to be done from the FMC itself and not possible through an ASDM or CLI? Is it the goal of Cisco to eliminate IOS/CLI acce...

I've typically configured both LAN and State failover for the ASAs via the same physical interface.  For example on an ASA5510:failoverfailover lan unit primaryfailover lan interface FAILOVER Ethernet0/3failover link FAILOVER Ethernet0/3failover inte...

Hi all   I have faced some sort of difficulties in configuration of an old device at my company which is FWSM. The problem is that I had created a testing policy-map called ZZZ, as well as the class-map with the same name (ZZZ). When I was about to r...