Network Security

Hi guys, I hope someone can help. I need to do the following actions on the attached ASA * Block all Internet from LAN * Block all connections to 10.56.0.0 /16 * Block all connections to 10.57.0.0 /16 * Allow connections from LAN to 10.56.40.195/32,...

Hi,does anyone know if it is possbible to span out decrypted traffic from FirePower 4110 (mirror port) ?Also, does anyone have any good experience of using SSL inspection on FirePower?Any pitfalls to be aware of?Any feedback is much appreciated.

Hello, I would like to find out why my ASA 5501 is not loading the saved config when booting up automatically? I have never seen that before on a Cisco device, I have to manually copy start run to reload it once is up. Thanks in advance. 

Hello we are using a Cisco ASA Firewall pair for basic Access List, NAT and Site-2-Site IKEv1 VPN. The firewall is just sitting there and there has not been any need of configuration change in last 1 year and there wont be any change in configuratio...

Hi All, We are planning Firewall Software Image Upgrade. We have a cluster with 8.4(4)1 Image, And we wanted to upgrade to 9.1(7). As per Cisco Docs, Upgrade can be in two steps - 8.4(4)1-->9.1(2) -->9.1(7) And this cluster carries almost 3500 VO...

Nat Rule not working | Firewalling | Cisco Support Community Hi, I am newbie and learning to manage the ASA 5505. I have got a site where we have one broadband with one Static IP. I wanted to config...

Hi All, i am currently looking for learning and course detail for CCIE security track, will appreciate if anybody come up with help.

Dear all, I need to capture packet go through VPN tunnel on ASA. I try to follow guide line with link bellow, but it show packet buffer empty. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118097-con...

Hi Folks,  Any feedback on the following idea appreciated.  Thinking to create an IPS policy with no http pre processing outbound. Then create an IPS policy with pre processing inbound.  I'm thinking I don't care so much if my trusted servers/client...

Hi, I have ASA5515 and assigned by ISP first IPs block with multiple NATs on 'outside' interface. Now I am given secondary IP block (completely different set of IP subnet) by the same ISP. I want to use new IP block to create NAT. I have configured I...

Hello, I am working on a DMZ design for a public website and I'm trying to find some information on the performance of the SSL decryption on both FirePOWER devices (such as the 7000/8000 series) and for the FirePOWER service on the firewall itself (...