Network Security

I have a DMVPN setup as well as another SD-WAN solution.  The tunnels for both solutions flow through an ASA for Internet access.  I have a problem when one end of the tunnel flaps or briefly goes down, the tunnel will not come back up.   I have narr...

Hi, I have email alerting working but want to only receive emails for my Corporate Subnets and not my Free Wifi Subnets. How can I achieve this?

I have created the DIR BOOTFLASH:/ISSU and STBY-BOOTFLASH:/ISSU but I can not expand I get the following msg Failed could not copy package files bootflash:ISSU check media any help

Hello, I am trying to set up SLA monitoring for the purpose of keeping a vpn tunnel up at all times. The problem is you can't specify a source IP address when configuring the SLA monitor on an ASA to send a ping to the remote end so it uses the outsi...

Hi,I was looking for design recommendations for a particular design scenario.I am working on an E/W FW with IPS and I am looking for a recommendation on how to setup the IPS Variable set - $HOME_NET. I have about 50 Interfaces and 90% of the traffic ...

Hello, I am checking the Whitelist and Blacklist at FireSIGHT. Some question still not clear 1) How to edit Global Whitelist and Global Blacklist?  Because I cannot find add IP address during edit them. 2) When edit Access Control under Policies.  ...

Hi,  I am currently working in a Pre-sales environment and facing a lot of queries regarding firewalls and security. Recently I got a query in which client told me he has 500 users and he wants a firewall as per their need. So now i need to know whic...

I did  a fresh install of 6.2.3 on an ASA5515.  Everything seems to be working OK but I have a yellow triangle warning on the reporting screen.  I can't find a way to see what this means.  I have attached a pic.  Any ideas,   TIA, Diego

I am trying to figure out how to replicate an existing configuration for NAT from my ASA to a FTD using FPMC to configure the device (5506-X).  I have attached a screenshot of what works now in the ASA. I want to be able to do port natting from the o...

Hi All,   I was testing a new access control policy with a single rule that permits ICMP application traffic from my inside network to the outside (see attached screenshot).   As expected, ICMP traffic such as ping, traceroute etc works without any i...

Thanks for reading, I have an ASA with Firepower and have setup Malware protection and URL filtering and all looks good from the monitoring in that I'm seeing threats detected and mitigated - Image attached.  I have 3 questions so any help appreciat...