Network Security

I have a development network that functions through another router inside the network. That internal dev network cannot reach the internet however you can ping, telnet etc to or from. I include a simple network diagram, sho route, sho ver and sho nat...

Today we updated our ASA 5505 from ASA 6.5xx to ASA 9.24, and as we know around 8.1 the way NAT was done was changed. I was under the impression that the ASA would "convert" most of the rules, and I figured I would have to recreate some of them that ...

Hello currently i am working on Migration Project, where i need to migrate Juniper SRX to Cisco ASA. I am stuck between middle of this project, while converting to IPSEC VPN. Please find below details: 1. Juniper has configured route based and pol...

Hi I have a 5585X with 2 WAN interfaces. One is the OUTSIDE interface which the default route points to. The other is a VPN interface which I would like to use for Anyconnect VPN sessions. I have configured PBR to set the next-hop of traffic sourced ...

Hello, I need to exclude a few external inbound IPs from triggering Firepower alerts. What is the best method to accomplish this:  Pass Rule, Access Control Policy - Trust, Whitelist..? Thank You Frank

Hi guys, I hope someone can help. I need to do the following actions on the attached ASA * Block all Internet from LAN * Block all connections to 10.56.0.0 /16 * Block all connections to 10.57.0.0 /16 * Allow connections from LAN to 10.56.40.195/32,...

Hi,does anyone know if it is possbible to span out decrypted traffic from FirePower 4110 (mirror port) ?Also, does anyone have any good experience of using SSL inspection on FirePower?Any pitfalls to be aware of?Any feedback is much appreciated.

Hello, I would like to find out why my ASA 5501 is not loading the saved config when booting up automatically? I have never seen that before on a Cisco device, I have to manually copy start run to reload it once is up. Thanks in advance. 

Hello we are using a Cisco ASA Firewall pair for basic Access List, NAT and Site-2-Site IKEv1 VPN. The firewall is just sitting there and there has not been any need of configuration change in last 1 year and there wont be any change in configuratio...