Network Security

Delete object network

All, I am trying to delete an object network that has a static NAT in it but the ASA keeps saying it is in use. What do I need ot delete first so that I can remove the object network? Thanks, All replies rated

Failover/sync issue

Hi Cisco Experts, We have recently replaced our standby ASA5520, the failover was turned off on the primary box during the replacement being fitted(this is where we think our mistake has happened!!!). Once we had the upgraded the standby asa to 9...

Cisco 2851 speed drops drastically with the NME-IPS-K9 Module

I have a Cisco 2851 with a NME-IPS-K9 module in it My normal speed is 118Mbps download As soon as I add the line ids-service-module monitoring inline access-list 101 my speed drops to 30Mbps download and this is with all of the inspection settings ...

Clearing ARP on firewall restores connection

Hello I currently have an ASA5505 running Version 9.1(6) The outside interface of the firewall is connected to ADSL router which in turn is connected to the internet Every now and then...the connection drops and i am not able to ping the ADSL modem...

ASA RA-VPN to access ASA ASDM

Hi All, Seeking some logic as i going to configure this scenario soon scenario: User connecting using AnyConnect client to ASA-HQ outside inteface So it will grant a DHCP IP pool My question How do i able to access the ASA-HQ ASDM, say it enabl...

Resolved! ASA5506-FPWR-BUN

I was wondering if anyone could tell me what this bundle includes with regards to subscriptions?ASA 5506-X with FirePOWER Svcs. Chassis and Subs. BundleDoes it include the URL, IPS and / or AMP subscriptions?thanks

Resolved! object groups in ACL

i use object groups for my cisco 1800 routers. the egress acl has a line (shown below) that permits staff to initiate remote desktop (RDP) connections from their computers on the office network vlan1 to any other computer. permit object-group rdp_po...

FMCv configuration deployments to FTD failure

Hi, We installed a Virtual FMC and added an ASA-5508-X FTD. This worked fine. But the problem is that when deploying any new setting to the FTD, the deployment fails with error "failed to read the module pack files" and "Deployment failed due to fail...

Firepower Management Center License with Smart Account

I have installed Virtual Firepower Management Center with version 6.2.2 and i have two physical FTD 4110 but i enabled evaluation license on FMC to manage both FTD and now evaluation period near to end and i didn't purchase license for virtual Manage...

Resolved! External auth with groups containing spaces

We are running FMC virtual 6.2.2. I am trying to implement External Auth under Users > External Authentication, but it looks like the Base DN and the Filters don't like groups containing spaces (e.g. CN=Some_Group,OU=Security Groups,OU=Level,DC=Doma...

ASA 5506-X, FirePower, can't change system policy

Hello!I have an ASA5506X with FirePower: ASA version 9.8.2.15, ASDM version 7.8.2.151, FirePower version 6.2.2.1 (Build 73).The Default system policy does exist, but I can't change it ( please see attached screenshots). I have got the Invalid object ...

ByPass Traffic to Specific IP on FirePower Cisco

Hello, We have a Firepower Cisco for WEB Filtering, we have some Policies created already, but I want to Exclude an specific Host or IP, I tried to add the Rule on Access Control Policy as following (1st Rule) but it does not work, still blocking m...