Hello, I am performing a switch hardening process. One of our clients has an issue with Cisco 6500 switch. While performing a Nmap scan on our network. We get the following information as a result. I would like to know this possible I can hide ...
Forum Posts
Resolved! Cisco ASA - Incoming and Outgoing ACL
Hi all, I'm just trying to cleanup a cisco asa 5516 configuration and I just noticed that some network guy implemented a bunch of outgoing acl on a specific interface.As far as I know, outgoing are usually not needed except in some cases, so I'd like...
Hi guys thanks for an awesome resource! I have a challenge with ASDM v7.9.1.151 (ASA 9.4.6.5) when adding vpn client profiles. As you can see below when typing in profile name profile location is automatically filled in with the wrong file exten...
Hello Experts, Request you to please help me with the information for DNS. We have a VPN gateway, where in all corporate users connect to it using cisco Anyconnect SSL Application. So when the users try to connect to VPN Gateway, Which DNS entry w...
I have 2 different isp I setup following configuration on ASA Firewall 5510 software 9.8. Problem is? when my Primary ISP Go down they transfer traffic on secondary isp .when I primary isp back they not come to primary isp they still on 2nd isp pleas...
I've been fighting this issue for a couple days now, and not sure exactly what's going on. Here's a quick run down: Windows Server 2012 R2 (Domain Controller, running FP User Agent 2.3 local) Firepower Management Center 6.0.1.2 ASA 5506-X w/ Firepo...
Resolved! Unlicesed ASA in FMC
Hello, I obtained licenses from Cisco through the partners request site by providing the license key for the fmc vm. When I add my lab 5506 to fmc and deploy the licenses to it the asa is showing unlicensed and Doesn’t support any of the features. Wh...
Hi, we use IPS to protect two separate units - different zones/networks with different rules applied but same Access Control policy. Is it possible to configure separate email alerts for these two units and how? Thanx. Br, Dragan
Hi team We observed one of our sites was isolated as firewall went to hung state and switching over to secondary firewall also didn’t happen. We switched off the secondary firewall and after restarting the primary firewall traffic got normalized...
Cisco ASA is configured with below commands and integrated with Active Direcoty NPS. aaa-server Radius protocol radiusaaa-server Radius (MGT) host 1.1.1.1key 12345678authentication-port 1812accounting-port 1813!!aaa authentication http console Radius...
Hi Team, We are receiving critical Alert in the FMC related to INTRUSION AND FILE EVENT RATE ALERT. And the in the Description Events per second is 58.524. Is it because of more Intrusion and File Attacks Detected. How to check this details. ? Kind...
Hello, Is there anyone who can have a better explanation about the performance downgrade issue in the 2017 NSS report? In the report, all the other vendors' product has fewer downgrade performance; but for Cisco FP 4110, the performance downgrade fr...
i have Created a design for data center security with having internal firewall, please help me out to configure this firewall as i am not good in security. the design is consist of following, 2 Nexus N3K-C3524P-10GX switches for Server farm 2 4507 ...
Resolved! Change NAT policy order in ASA 8.0
Hello!!!I want to change nat policy order via CLI.I want rule number 3 move to number 2 and rule number 4 move to number 3.ASA5510 version 8.0ASA(config)# show nat inside srb match ip inside 192.168.1.0 255.255.255.0 srb 192.168.100.0 255.255.255.0 ...
Resolved! Hops not showing in Traceroute after ASA
I'm trying to traceroute through an ASA and none of the hops after the ASA appear. I'm assuming the ASA is blocking the time exceeded responses but can't seem to fix this behavior. The ACL is simple: source any, destination any, service any ip. A s...
