Network Security

Resolved! ASA 5512-X upgrade 8.6.1 to 9.1.3

I am going to be upgrading ASA 5512-Xs from 8.6.1 to 9.1.3. Mind you this will be my first upgrade on a production ASA. One is local to me and one is remote.From what I have read I will need to use an upgrade path to get to 9.1.3 as it is suggested t...

Perserve QOS markings through ASA

I am testing and evaluating QOS from our remote locations to a server in our DC that is behind an ASA. Using LiveAction I can easily see that traffic from the source is marked af21 to destination but traffic from the destination back to the source i...

Signature to detect DNS Tunneling - SourceFire

Experts, I have gone through some recent vulnerabilities document from cisco and came to read a topic on DNS Tunneling & an Application tool that may perform such activity - DNScapy. " DNScapy is a DNS tunneling tool. The code is very light and wr...

ASA 5508X - Traffic capture not working on specific port

I have an ASA5508X with 8 ports.1/1 is WAN (172.16.0.1 to router)1/2 is LAN (192.168.1.1 to switch)1/3 is directly connectd (10.0.01) to a PC I want to use for monitoring traffic (10.0.0.2).1/1 and 1/2 have complex access lists on them.On 1/3 I creat...

AnyConnect VPN Client FAQ

Hi , i want to know/monitor what the users did or accessed once they have log in via VPN using Cisco ASA.Want to get the login/logout , durantion, what they accessed for ex. RDP or any services. Please advise. regards

packet tracer type vpn subtype encrypt result DROP

Dearsi have a L2L vpn from branch to HQ and everthing works fine i am adding a new subnet in the vpn access-list exactly as per the cisco recommendation mirror access-list on both ends, But still the connection to the ISE server on port 1645 fails my...

ASA 5525 Bottlenecking Internet Speeds

We have recently upgraded our 100Mbps line to a 400Mbps line and discovered the ASA seems to be bottlenecking the connection. For instance if we plug straight in to our NTU we get the full 400Mbps but as soon as we plug in the ASA we're lucky to get...

Problem in setting up a new ASA5516-X

i have one ASA5516-X with Firepower Services and i tried to reimage the Sourcefire module but it shows that sfr module is in recovery state and it did not accept any command like Session SFR console, or any other command.i am waiting since 3 hours af...

Resolved! Traffic over CISCO ASA 5516X HA Link

I am in a process of deploying ASA 5516x HA cluster ( Active/Standby), I need to connect this cluster to another FW HA cluster ( not sure about the vendor) with another organisation. I was given a network design physical connectivity as below, Cisc...

Resolved! Interface Redundant and sub Interface's - Single ASA 5525X

Hi AllWhen setting up Cisco ASA firewalls, we prefer to install them in pairs. A High Availability (HA) pair is our usual deployment and works well for our particular solution model. Our current customer has forced us down the route of a single firew...

Resolved! asa 5512-X failed failover and firepower?

i have two 5512-x connected and configured with failover , we had firepower configured with one of them only "the secondary" , recently we found that failover under show failover is show primary - failed also under show failover history it shows "det...

FMC/FTD Add NAT Policy via API

Is this possible? If so anyone how what the API URL is?

Resolved! FTD and FMC 6.2.0.2 Compatibility

Hello Experts. I need your help to understand below two questions, I 'am new to FTD and FMC. I will be dispatching 11 ASA 5525+TAMC license and One 5516+TAMC License. FMC image ver is 6.2.0.2 -ASA has come with sfr image 6.2.0, can i dis...

possible NAT issue??? proxy arp????

Upgrading from PIX (6.3) to an ASA 5515 (9.4). Went to make switch other day, and had to backout due to a specific application inside the DMZ not being able to reach an outside destination host. Here is scenario:Src Host 172.16.10.10 behind DMZ inter...

Resolved! ASA 5512-x Firepower Internet Access for updates

How can I allow Firepower to get updates when currently the Outside int is not required in this deployment?

Network Security

Forum Posts

Resolved! ASA 5512-X upgrade 8.6.1 to 9.1.3

Perserve QOS markings through ASA

Signature to detect DNS Tunneling - SourceFire

ASA 5508X - Traffic capture not working on specific port

AnyConnect VPN Client FAQ

packet tracer type vpn subtype encrypt result DROP

ASA 5525 Bottlenecking Internet Speeds

Problem in setting up a new ASA5516-X

Resolved! Traffic over CISCO ASA 5516X HA Link

Resolved! Interface Redundant and sub Interface's - Single ASA 5525X

Resolved! asa 5512-X failed failover and firepower?

FMC/FTD Add NAT Policy via API

Resolved! FTD and FMC 6.2.0.2 Compatibility

possible NAT issue??? proxy arp????

Resolved! ASA 5512-x Firepower Internet Access for updates

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Is there a way to fail over from ASA Multi-Context 1 to 2?

FMC Critical Alert Disk Usage

Palo Alto to Cisco Migration Tool count_summary error

cdo integration with Azure ad MFA

FMC and multiple AD domains

the number of nat sessions of firepower?

FMC DHCP Option

What happens to an L7 ACP rule when IPS option is not enabled.

Delete config on ASA 5510

IPS traffic report