Network Security

I have launched a vASA on AWS and I am able to connect to it via its mgmt interface.   Now I'd like to create an Inside and Outside interface. So I created 2 ENI's and attached them to the vASA instance via the AWS console but they wont show when a I...

I have been getting conflicting information on Cisco ASAV on AWS. We had subscribed to Cisco ASAV pay by the hour on AWS . When we hit an issue and tried to raise a ticket with Cisco, Cisco would not support it as there was no license contract associ...

Hi, i need to know if its possible to do a NAT Reflection configuration for an ASA FTD image.   i need it for an expressway deployment,   Thank you!

Hello, I got firepower management center virtual 6.0.1 , and asa with firepower services 5555-x 6.0.0.1. I have malware license. My question is - which device is submiting the unknown captured file to dynamic analysis (cisco sandbox in the cloud) ...

Just wondering if anyone else has experienced a lagging in their NGFW2100 or ASA5506-X firewalls.  We have one of each of these and a couple of weeks ago we noticed the network seeming to drop for a few seconds every few minutes.  If you click to go ...

i put ISE in DMZ zone in fortigate and Users in different Zone , i installed forti FSSO tool in active directory so it can send users with ip mapping to fortigate so i can apply policies based on username , and users are in different zone than ISE , ...

Hi , I am beginner to ASA device. I am having issue accessing Inside from low security level i.e. 80.  Below is config relating to those interfaces: interface Vlan200 nameif inside security-level 100 ip address 172.25.100.254 255.255.255.0 !interface...

Hi everyone, Firepower 2110 Threat Defense is in questionI need to set security-level to be 100 on some interface, but I cannot seem to find where to set that up. Nothing on the User interface, and I tried almost all commands in the command line. I e...

Can anyone please send me a link or links on how configuring "connection rate" and "stateful packet inspections rate" on an ASA?It seems not easy to find the linksthanks,Han

I have an Exchange server running on a LAN on the Inside Interface.  Recently a new build of GFI MailEssentials (running on the mail server) caused internet connectivity to fail on that server stopping email flow.  I can ping other machines on the LA...

  Running into issue with ASA+FP devices across the globe where I cannot get a policy applied to the appliances. It basically times out. Tail the log files seems like the direction I should go but which log should I be using with pigtail? I even trie...

object network GUEST-INTERNET subnet 10.205.64.0 255.255.252.0   object network GUEST-INTERNET nat (extranet,outside) dynamic xxx.xx.199.135 Auto NAT Policies (Section 2)   2 (extranet) to (outside) source dynamic GUEST-INTERNET xxx.xx.199.135     tr...

Hello,   We are about to start the journey of migrating many virtual servers from our VMware estate to Azure.  We only have about 5 servers in there now, but will move around 100 over this year I think.  At the moment I'm just using the NSGs for fire...