Network Security

Hi, I have ASA 5540s. I configured internal web server to host a web site. I have a VIP on netscalers that is set up to reverse proxy to my webserver. Its 80 and 443 traffic. Everything works fine except for when I'm using Verizon cellular connection...

Hi All,   I just wanted to check what the best practises are with logging against access control policy rules, specifically logging at the beginning of a connection vs logging at the end of a connection? I know that its not recommend to log both begi...

I've followed the steps to enable external database access for FMC successfully. Downloaded the client.zip too. After configuring custom database connection type at Splunk and adding a new connection. I encountered the following error at validation. ...

Hello,We are setting up an ASA-5516X running FTD 6.2.2, using FMC, and have been able to setup a VPN policy for AnyConnect clients.   We have remote 800 and 880 series routers that are configured to connect to our old ASA using ezvpn in network exten...

Hello,   My questions are not very specific in nature as I do not work often with Cisco devices.  I have been asked recently to help assess security of Cisco devices primarily ASAs and to lock them down.  Currently I have a Cisco ASA 5505 I am testin...

I need some assitance with using NetFlow in combination with WCCP.   We have a firewall enabled with WCCP and NetFlow exporting the flow to a NetFlow analyzer. The issue at hand is that all traffic that is redirected by the WCCP rule, shows as the IP...

Hi,  We have multiple ASA 5525-X firewalls however one reports the fans running at 5300 rpm and a status of okay all our other 5525's report a fan speed of 6144.   The unit reporting 5300 rpm is running 8.6.(1)2, and the others are running 9.8.(2)17....

I have a DMVPN setup as well as another SD-WAN solution.  The tunnels for both solutions flow through an ASA for Internet access.  I have a problem when one end of the tunnel flaps or briefly goes down, the tunnel will not come back up.   I have narr...

Hi, I have email alerting working but want to only receive emails for my Corporate Subnets and not my Free Wifi Subnets. How can I achieve this?

I have created the DIR BOOTFLASH:/ISSU and STBY-BOOTFLASH:/ISSU but I can not expand I get the following msg Failed could not copy package files bootflash:ISSU check media any help

Hello, I am trying to set up SLA monitoring for the purpose of keeping a vpn tunnel up at all times. The problem is you can't specify a source IP address when configuring the SLA monitor on an ASA to send a ping to the remote end so it uses the outsi...

Hi,I was looking for design recommendations for a particular design scenario.I am working on an E/W FW with IPS and I am looking for a recommendation on how to setup the IPS Variable set - $HOME_NET. I have about 50 Interfaces and 90% of the traffic ...

Hello, I am checking the Whitelist and Blacklist at FireSIGHT. Some question still not clear 1) How to edit Global Whitelist and Global Blacklist?  Because I cannot find add IP address during edit them. 2) When edit Access Control under Policies.  ...

Hi,  I am currently working in a Pre-sales environment and facing a lot of queries regarding firewalls and security. Recently I got a query in which client told me he has 500 users and he wants a firewall as per their need. So now i need to know whic...