Network Security

Hello,I'm trying to configure PAT on ASA 5506-X (ASA version 9.8(1), ASDM version 7.8(1).With the current configuration I'm able to go from inside networks to outside, but I need to connected internal hosts from outside (wan interface, in my case).Fo...

Hi,   I have a problem with redirecting to captive portal.Everythung is ok for some sites (for example ya.ru), but doesn't work mor many others (for example webplay.pro). What might be a reason?

Cisco ASA 5505 outside interface connected to Verizon wireless modem gives IP with 255.255.255.255 mask. inside 192.168.2.1/24 outside 166.155.0.20/32   it creates automatic route ip d*   0.0.0.0 0.0.0.0 [1/0] via 166.155.0.20, outside     Should ASA...

I'm configuring interfaces by GUI in Cisco 5506x but i'm unable to configure security level for specific interface. I have two interfaces in up/up states and both are configured with security level 0. I just want to configure my inside interface with...

We are running into an issue where firepower is dropping traffic even though it shows hitting the trust rule we have in place. We are running 6.2.2 across the board. Has anyone else come across this? It seemed to keep dropping the apache struts rule ...

Hey Guys,   Question about the subject. We have a Cisco ASA 5545 HA setup. The primary  ASA failed on us and the standby is currently handling all traffic. We received the new ASA 5545 (grey market) in, and need to replace the bad one...    Can I jus...

Here is my current setup * main location with Firepower 2100 and Internet with DMZ/Servers.  Default route for all networks goes to this firewall. * new location with Firepower 2100 and Internet with DMZ.   Trying to setup a NAT from a DMZ IP Address...

I have a question about Firepower jion the FMC.  i can be sure network connectivity is normal and the key is match. but the process is stop 17%  and still 21h hours。 it seems like still running     

Hi,   I have ASA directly connected with Nexus switch. When i see the traffic rate at both side on directly connected interfaces, there is a major difference.   NEXUS-9K# sh interface eth1/41 | in rate 30 seconds input rate 270831600 bits/sec, 91518 ...

Forgive the question, I'm still learning quite a bit. I was trying to think up some rules for my 5506 to make my network more secure, but I already don't allow any access from the outside to inside, and don't even really have any rules yet. It's a sm...

On FirePOWER, Access Control Policies can be configured for blocking with RESET. Cisco's documentation doesn't say if the RST flag is sent to both source and destination.  Some IPS vendors don't send the RST to the offender. So, how is FirePOWER do i...