Network Security

Hi,Here I need help from someone! I have a scenario where, one hub site which is connected to metro ether MAN at 1Gbps and spoke sites are variable bandwidths. Requirement is I should be able to shape down stream traffic branch-wise and in total at 1...

In Firepower Management 5.x we ordered FS-VMW-10-SW-K9 (Firesight 10 devices). In the renamed version Firepower 6.0 Management, do we still need to order these licenses? If so, does anyone have the new sku...ThanksShawn

Hi folks,   Apologize in advance if this is not the right forum I posting this in as this is a my first post.   I have an ASA5515. Current primary ISP (outside) is a static IP. We are in process of installing a backup using a wireless modem that give...

We are currently working on an issue where, as the title suggests, after failover of active FW from primary to secondary, there was no traffic passing through the secondary(active) FW. Due to this, the active FW was immediately failedback to primary....

I am working on a big firewall migration project where each firewall has atleast 10K lines of ACLs, I need to export them into an excel spreadsheet and then get rid of the redundant ones. Then would need to configure them on the new firewall.   Since...

Hi Team, in refer to https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl, any specific reason for the bug on ASA CSCuz52474 not visible to partner cco while the rest device bug are fine? Insufficient Permis...

Is there an easy way to add numerous IP addresses to an object group.  I have a spread sheet of IP addresses that I need to put into an object group and the ASDM takes forever to add them especially as many as I have to add.  I did not know if there ...

Hello,Our Cisco ASA 5520 firewall is running with 99% CPU, Processes Dispatch Unit is using over 90 % of CPU, and capture is showing below drop reason :   Drop-reason: (nat-no-xlate-to-pat-pool) Connection to PAT address without pre-existing xlate fi...

Dears, My IKEv2 tunnel is not coming up with the below settings , on my end I have a asa and the remote end is check point , I want to know the below is correct configuration or there should be some change,   crypto ipsec ikev2 ipsec-proposal AES256 ...

hello Community,I have another question about the VPN integration with any of our FTD versions ( including ASA with FP) with the cloud, i.e AWS VPC.Customer use case : MX Meraki can not be configured to integrate with any cloud VPN. Can you please co...

I would be grateful if somebody could point me in the right direction.   On our ASA 5510 the management interface is set up as management only (Subnet 172.24.100.0/24).   The above subnet is also used as management access to our other firewalls.   We...