Network Security

I have a new set of Firepower 2130 appliances and a Management Center 1000. One of the differences between the 5525x and the Firepower is that some users can run traceroute, tracert or mtr and get useful information. Other users cannot get past their...

Hello Experts,   I need your help with a configuration bit for Object based NAT - Natting two public IP to one private IP.   I am asked to nat two public IP to one private IP 8.xxx.xx.90 and 8.xxx.xx.92 to nat to 10.53.19.8.  8.xxx.xx.92 nats to 10.5...

Hello,   This could be due to pure ignorance on my part, but I noticed odd behavior on one of the ASA's I manage.   There were a couple clients showing as the source IP for a SYN Attack. Of course, I jumped to malware and scanned the heck out of one ...

It is to my understanding that there are only specification differences between the two models listed in the title.  If I wanted to restore a backup from a 4140 to a 4120 appliance, then will I run into any problems?  Is this possible in the first pl...

Can I do a direct software upgrade from 9.1(4) to 9.1(7)23? 

Dears. I am following the below link for creating the self signed certificate for captive portal but when I try to generate CSR I get an error as attached. Also I tried with link 2 but no luck   captive portal self signed certificate https://www.cisc...

Hi, I have two ACS appliances running 5.7.0.15.2.   Appliance 1 has policies on, appliance 2 is to be the secondary appliance.     I've been trying to add the secondary to the primary for replication and the secondary appliance does not seem to be b...

Hi,  I am having issues downloading the 8.2.5 ED and 8.4.5 ED versions of the Adaptive Security Appliance Software. I get an error message that there is no server response. I was able to download 8.3.1 successfully. Is there a reason why these files ...

I have an ASA 5505 with the boot error 15 no file found. I have tried with the following commands in ROMMON address 10.1.1.2 server 10.1.1.1 interface ethernet0/0 file asa924-k8.bin "the ping between asa and server is good" tftpdnld The download time...

Hello Sir, I am receiving syslog message - licensed host limit was exceeded. Deny traffic for protocol 6 src outside:69.162.124.231/7086 dst inside:out-252/80, licensed host limit of 10 exceeded. Also please clarify me what is inside host license ?...

Hi, I am replacing ASA-5505 with an RV345 small business router. ASA allows me to assign security levels to different VLANs in order to create one-way traffic flow. For example, I don't allow my guest vlan to see the inside vlan. Is there a similar c...

I've been trying to find a way to have an ASA advertise static and dynamic NAT through a dynamic routing protocol without luck. There appeared to be a way to use static routes along with NAT to do it with 8.2 and earlier, but I don't think that works...