Network Security

Take these two example below.  %ASA-6-302014: Teardown TCP connection 9 for outside:10.1.2.1/22 to inside:10.1.1.2/53496 duration 0:00:30 bytes 0 SYN Timeout   %ASA-6-302014: Teardown TCP connection 8 for inside:10.1.1.2/12523 to NP Identity Ifc:10.1...

I am using ASA (vers. 9.6) with firepower services and SFR modules are managed by FMC. We have two ISP directly connected to ASA. and I configured ISP1 as primary by configuring static route. with tracking. I want to load share traffic on source ip b...

is the ids and ips different module in firepower, i was told that if IPS run in read-only mode, it is ids, is it true. I try to search ids troubleshooting in firepower in internet, but there is no troubleshooting guide for ids and ips, anyone have fo...

I have a router on the outside of the firewall where the public address resides to the internet. From the asa I have set the static route to this router and have set the associated rules to pass traffic from the inside host to the outside internet ho...

Hi Folks, I have an ASA 5545-IPS and am planning to move to the Firepower but before that I need to familiarize with that and i want to load the firepower software into my ASA 5525-X. So if anyone can share the firepower software and firesight for te...

Hello Sir,I have some questions, Q.1 Is it true that ASDM(Adaptive Security Device Manager) is no longer used to access the interface of the ASA Firewalls ? Now a days ,an application from Cisco is used to access the interface of an ASA Firewall for ...

Hello everyone I cant get any VPN troubleshooting data from my FTD imaged 5506-X to my FMC.  All the documentation leads to simply check the box in the platform settings. Obviously i‘ve done that. More so i feel like i‘ve tried every possible combina...

Hi all,   i know this Problems are not new but somehow i don´t get it.   I have an ASA5510 with One Physical Interface that hold 5 IP´s. I have until 5 Server in the DMZ.  Now i need another one but it is the secound smtp Server so i need on the same...

Hi I have a 5545 ASA with firepower service, we currently use L2 design, the sfr module ip address is on the subnet with inside interface and the gateway for the sfr is inside interface as well. now I am trying to add an different  ip address to the ...

Hi All   Im in the middle of upgrading a firewall to a newer 5525X. I transferred the config over but i then realised that the identity certificate has expired in 2016. The CA certificate expires in 2021.    My question is. Do i have to get a new ide...

Trying to troubleshoot why url filtering isn't working for our new FP 4110 boxes. One theory of mine is that the FTD can't perform a DNS lookup, supported by the fact I can't ping or traceroute hostnames from the FTD cli. But I can't for the life of ...