Network Security

Hi, I have two ACS appliances running 5.7.0.15.2.   Appliance 1 has policies on, appliance 2 is to be the secondary appliance.     I've been trying to add the secondary to the primary for replication and the secondary appliance does not seem to be b...

Hi,  I am having issues downloading the 8.2.5 ED and 8.4.5 ED versions of the Adaptive Security Appliance Software. I get an error message that there is no server response. I was able to download 8.3.1 successfully. Is there a reason why these files ...

I have an ASA 5505 with the boot error 15 no file found. I have tried with the following commands in ROMMON address 10.1.1.2 server 10.1.1.1 interface ethernet0/0 file asa924-k8.bin "the ping between asa and server is good" tftpdnld The download time...

Hello Sir, I am receiving syslog message - licensed host limit was exceeded. Deny traffic for protocol 6 src outside:69.162.124.231/7086 dst inside:out-252/80, licensed host limit of 10 exceeded. Also please clarify me what is inside host license ?...

Hi, I am replacing ASA-5505 with an RV345 small business router. ASA allows me to assign security levels to different VLANs in order to create one-way traffic flow. For example, I don't allow my guest vlan to see the inside vlan. Is there a similar c...

I've been trying to find a way to have an ASA advertise static and dynamic NAT through a dynamic routing protocol without luck. There appeared to be a way to use static routes along with NAT to do it with 8.2 and earlier, but I don't think that works...

Hi All,   I have a question regarding a NAT on an ASA, seeing if it is possible or the best solution to my problem - before I try it as it needs to go through some change control etc.   I need to access some devices via a wireless network and whilst ...

We've a DMZ with a server on it, and we essentially want 1 user to be able to access it. But in my understanding thats not possible.   All of the tips and tricks ive found is with the 8.3 cli commands, and ours is 8.2 so i mess up the nat() etc comma...

hello, Now, we deploy the FirePower2110 to replace ASA5525, we find the following situations, from the AScentlink,we can ping pass 10.229.31.17(primary device firepower 2110), but from 2960 switches(connect the internet) ，we can't ping pass 10.229.31...

My question is that,if have two firewalls(ASA) with different location and both are using site to site IPsec tunnel for communication,and both are using different NTP server.Then how they will communicate each other using different NTP server.please ...

Hi, Is there a way to create Negate Objects on FTD 6.2?    thank you.

Hi,   Is there any way to perform this with regex?   - We have to allow http access to hosts .175 and .176 of 10.18.[0->254].0/24 10.19.[0->254].0/24 and 10.20.[0->254].0/24.   Any clue?.   Thanks in advance!.   Javier.      

We performed our routine penetration testing, and performed a port scan. We just upgraded to a new ASA with a 9.8 version. We noticed that all of our ports were opened; we used NMAP externally. although we couldn't connect via a telnet test. (telnet ...