Network Security

Experts   Please correct me n FTD do we assign the IPS policy to ACL or do  we have to create an inline pair. Am moving one firewall and one IPS to FTD. 

Hello,   I have an ASA Firewall with SFR capabilities that has 2 routed interfaces: Inside and Outside. I need to reconfigure the physical inside interface, make it trunk and create 2 subinterfaces: one will be the previously inside interface and add...

We have ASA5545-X with SFR module installed. i need to upgrade ASA software from 9.5 to 9.8. and i want to do the upgrade only on ASA. while i dont want to make any change to SFR.   i am confused whether upgrading ASA software will have any impact on...

Good day forum users. It is my first post here, and I am seeking for your support on one problem . I am trying to first setup  the ASA5506-x and it seems that something missing in image file shipped with HW:   firepower# show module all Mod Card Type...

We have an Active/Standby pair of ASA5520 devices connected to the core with a /27 public IP address.  We also have an Active/Standby pair of ASA5525-X devices connected to the core with a /28 public IP address.  The default route from the core goes ...

Hello.A customer has today up&running a FirePower 4110 with Thread Defense + Malware License. He now wants to add Radware's Virtual Defense Pro.From the HW perspective, is it needed to add something else?From the services chaining, could all the serv...

I currently have an ACL set to log informational events and when I use the real-time log viewer in ASDM it seems to miss some of the events. I can see the hit counter increment, which I have set to update every 10 seconds, but I do not see an event i...

Hello, I've recently factory reset our ASA (moved buildings) and it's all up and working now and users have local desktop Internet access. I'm now configuring the AnyConnect client and when connected my laptop can access our remote subent where our...

I can apply below command with asa5510 but can't apply with 5512x (same ios version) don't know why it's not working   access-list inside_access_in extended permit tcp object-group DM_INLINE_NETWORK_196 object-group DM_INLINE_NETWORK_197 object-group...

HelloI am trying to upgrade a Cisco ASA over an IPSEC VPN tunnel. My FTP server is on the remote side of the VPN tunnel but I am initiating connections from the inside interface of the firewall. I am currently managing the Firewall over the VPN via i...

Dear all, Sorry, I posted the same in discussion and thought I will also post it here, sorry again I need to stop clients from accessing Cpanel ports outside our network. The issue we have is that our home page is hosted by an external company and...