Network Security

Hi There,   I have an urgent problem, on which i cannot figure out how to deal with it.   I have an asa5506-X with two internal VLAN's (VLAN 10, VLAN 20 Guest Network) I Have one normal WAN Connection to the internet. I also have an special 2nd intra...

Dears, I have kept network analysis policies in a passive mode ( default mode) but the access control policies has default action of IPS that means if the traffic doesn't match it will pass by the IPS,   I have not enabled a network analysis policies...

Hi, I have multiple specific SID's that I specifically want to disable across multiple intrusion policies on a Cisco Firepower device as part of a tuning process. Unfortunately when entering the SID's with a , deliminintaor into the filter from the r...

Hello,   Well I have this firewall Cisco ASA5516-X firepower with this default configuration:   timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:...

I have launched a vASA on AWS and I am able to connect to it via its mgmt interface.   Now I'd like to create an Inside and Outside interface. So I created 2 ENI's and attached them to the vASA instance via the AWS console but they wont show when a I...

I have been getting conflicting information on Cisco ASAV on AWS. We had subscribed to Cisco ASAV pay by the hour on AWS . When we hit an issue and tried to raise a ticket with Cisco, Cisco would not support it as there was no license contract associ...

Hi, i need to know if its possible to do a NAT Reflection configuration for an ASA FTD image.   i need it for an expressway deployment,   Thank you!

Hello, I got firepower management center virtual 6.0.1 , and asa with firepower services 5555-x 6.0.0.1. I have malware license. My question is - which device is submiting the unknown captured file to dynamic analysis (cisco sandbox in the cloud) ...

Just wondering if anyone else has experienced a lagging in their NGFW2100 or ASA5506-X firewalls.  We have one of each of these and a couple of weeks ago we noticed the network seeming to drop for a few seconds every few minutes.  If you click to go ...

i put ISE in DMZ zone in fortigate and Users in different Zone , i installed forti FSSO tool in active directory so it can send users with ip mapping to fortigate so i can apply policies based on username , and users are in different zone than ISE , ...

Hi , I am beginner to ASA device. I am having issue accessing Inside from low security level i.e. 80.  Below is config relating to those interfaces: interface Vlan200 nameif inside security-level 100 ip address 172.25.100.254 255.255.255.0 !interface...