Network Security

Hi I am just starting to learn ccna security. I bought an asa 5510 with ver 7.2 on it. When I do a sh ver I get this.   Cisco Adaptive Security Appliance Software Version 7.2(2)19Detected an old ASDM version.You will need to upgrade it before using A...

I am facing a problem in grouping TCP/UDP/ICMP port services (like http,https,ping etc) into a single service group. However after creating a service group, it is showing grey out in ASDM and also the group is not working after calling it in a policy...

Hi All,   We have two ASA 5520 which is doing active/ standby pair. I would like to add expansion slot on both 5520. And we do not want any down time while doing this. My Plan ====== 1. Backup all the config 2. Power down the secondary ASA . Install ...

Hi, does the ASA to FTD migration tool work on ASA's running pre 8.3 versions?

Hi everyone, I've configured snmpv3 client on my ASA with policies snmp and snmptrap. I found there are only snmptrap traffic from a switch (also configured snmpv3) on ASDM but snmp hit count stays 0. Then I run packet captures on this ASA ingress/en...

Hello, I have a cisco asa 5525 and I found out there is a vulnerability ( cisco-sa-20180129-asa1 ) and I dont know if my version is vulnerable (my version is 9.6.3) . According to this site ( https://tools.cisco.com/security/center/content/CiscoSecur...

Hi,   In Cisco ASA ASDM it is showing top 10 user statistics for last one hour but I want to configure for last 10 minutes. Is there any way to configure this feature in ASA.   Thanks, Ashok

Hello, I Have a vpn between my site (asa 5506) and a costumer site (5505). It’s been working for more than 1 year but since yesterday the ASA 5505 is always rebooting (from 10 in 10 minutes). The crashinfo command shows: Thread Name: Unicorn Admin Ha...

Does prefilter policy in FTD support stateful inspection ? or I have to created two rules for outgoing and return traffic.

Just setting up my first instance of FTDv in AWS.  But for the life of me I can't figure out how to get the outside interface to reach the Internet.   I've got my Internet Gateway and all my other EC2 resources don't have any issues.   Looks like it'...

Hello i have some suggestions about Packet tracer. I think that the packet Tracer should be implemented the devices that can simulate also attack. attack on switch, routers, ios, firewalls, IoT devices.i can explain with for example: after we finish ...

Hi everyone,   On my ASA, I've met a strange issue about PING. Let me show you the config:Zone ADM: security-level 100, VM-net-device=192.168.1.1Zone MGT: security-level 100, VM-NMS=172.16.1.104ICMP echo, echo-reply, unreachable are allowed in both z...