Network Security

Experts,   Not sure what has happened here but after upgrading my ASA to 9.9.1 from 9.6.3, a global MPF policy I had applied was removed from the configuration. This policy was doing default traffic inspection as well as DNS inspection for use with D...

Hi,  My server team have sharepoint installed on the DMZ.  I have a firewall rule (1) allowed for corporate network access to the dmz on htttps which works fine.  But i also from the dmz rule (2) back to the domain controllers on the corporate networ...

Hi AllNot sure if this is the correct forum for this thread....I am working for a consultancy firm and we are under increasing pressure from various customers to use Juniper SRX's in place of Cisco ASA equivalent due to cost. The ASA is a great produ...

I am wondering if I have a firewall with inside and DMZ zones, is there any security concern when setting up both zones on the same switch making them just layer 2.  

Hi I am just starting to learn ccna security. I bought an asa 5510 with ver 7.2 on it. When I do a sh ver I get this.   Cisco Adaptive Security Appliance Software Version 7.2(2)19Detected an old ASDM version.You will need to upgrade it before using A...

I am facing a problem in grouping TCP/UDP/ICMP port services (like http,https,ping etc) into a single service group. However after creating a service group, it is showing grey out in ASDM and also the group is not working after calling it in a policy...

Hi All,   We have two ASA 5520 which is doing active/ standby pair. I would like to add expansion slot on both 5520. And we do not want any down time while doing this. My Plan ====== 1. Backup all the config 2. Power down the secondary ASA . Install ...

Hi, does the ASA to FTD migration tool work on ASA's running pre 8.3 versions?

Hi everyone, I've configured snmpv3 client on my ASA with policies snmp and snmptrap. I found there are only snmptrap traffic from a switch (also configured snmpv3) on ASDM but snmp hit count stays 0. Then I run packet captures on this ASA ingress/en...

Hello, I have a cisco asa 5525 and I found out there is a vulnerability ( cisco-sa-20180129-asa1 ) and I dont know if my version is vulnerable (my version is 9.6.3) . According to this site ( https://tools.cisco.com/security/center/content/CiscoSecur...

Hi,   In Cisco ASA ASDM it is showing top 10 user statistics for last one hour but I want to configure for last 10 minutes. Is there any way to configure this feature in ASA.   Thanks, Ashok

Hello, I Have a vpn between my site (asa 5506) and a costumer site (5505). It’s been working for more than 1 year but since yesterday the ASA 5505 is always rebooting (from 10 in 10 minutes). The crashinfo command shows: Thread Name: Unicorn Admin Ha...

Does prefilter policy in FTD support stateful inspection ? or I have to created two rules for outgoing and return traffic.