Network Security

We've a DMZ with a server on it, and we essentially want 1 user to be able to access it. But in my understanding thats not possible.   All of the tips and tricks ive found is with the 8.3 cli commands, and ours is 8.2 so i mess up the nat() etc comma...

hello, Now, we deploy the FirePower2110 to replace ASA5525, we find the following situations, from the AScentlink,we can ping pass 10.229.31.17(primary device firepower 2110), but from 2960 switches(connect the internet) ，we can't ping pass 10.229.31...

My question is that,if have two firewalls(ASA) with different location and both are using site to site IPsec tunnel for communication,and both are using different NTP server.Then how they will communicate each other using different NTP server.please ...

Hi, Is there a way to create Negate Objects on FTD 6.2?    thank you.

Hi,   Is there any way to perform this with regex?   - We have to allow http access to hosts .175 and .176 of 10.18.[0->254].0/24 10.19.[0->254].0/24 and 10.20.[0->254].0/24.   Any clue?.   Thanks in advance!.   Javier.      

We performed our routine penetration testing, and performed a port scan. We just upgraded to a new ASA with a 9.8 version. We noticed that all of our ports were opened; we used NMAP externally. although we couldn't connect via a telnet test. (telnet ...

Hello,Friend I am really confused in configuring a site to site vpn;can somebody help me by giving me the way forward for sorting out the issue?I am configuring a site to site vpn where the remote IP (public) is used twice on my firewall as it has to...

Hello All,    I need to upgrade cisco asa from 9.6(2)7 to asa964-5-lfbff-k8.SPA, are there any changes in configuration ?    Thank you

Hello, M name is Bernard and I would like to request some assistance with an ASA 5505 which is giving me the error "unable to launch device manager from xxx.xxx.xxx.xxx(x represents the IP address of the ASA)  when I launch the ASDM application.I'm n...

Hi All,   I am doing a new deployment of Virtual Firepower Thread Defense (FTDv) using ESXI and using ACI as bridge domain for my infrastructure.   My problem is the FTDv is running in Transparent mode between 2 routers and these routers will be runn...

Dear all,Please let me know bellow.I want to allow only google mail using source and destination concept.How to configure source and destination using i.p and port number if we are using dynamic i.p  Thank you Regardssuresh

Hi, I have a new ASA5508 where i installed the new FTD 6.2 I think the interface looks OK, but i cant find out how to monitor the site2site VPN Can anyone tell me o i can see status of the VPN tunnels, and how to see some log if i have a tunnel wit...

I am wanting to deploy a FTD virtual into Azure using the pre-built on the from Azure Marketplace.  I want it to be in Routed Mode and to have an Inside, Outside, a DMZ interface, and finally an interface for Management.It sounds like the FTDv only s...

Hi   I am planning to install ASA 9.9 code on FTD 4150, do we need different management IP addresses to FTD and ASA or do they share same management IP address? I believe FTD 2100 Model shares same management IP address between FTD and ASA if we inst...