hi Friends,We ahave ASA 5510 and 5520 @ our office. We are not using any netflow tools in order to get the talk talklers.As this firewalls are shared firewall (used by different Projects), we are not able to get , which project is using more traffic ...
Forum Posts
I'm using sla monitor to monitor 2 interfaces on a failover pair of 5525s. Here are the sla mon config lines: sla monitor 10 type echo protocol ipIcmpEcho 25.25.25.154 interface outside (This IP is reachable by both interfaces and is not the gw to ...
Hi All, Need help. I have my ASA5525 ver 9.8. configured for dual ISP. ISP1 where all traffic goes through except URL abc.com that is supposedly bound for ISP2. thank you in advance
Resolved! Firepower Rule 1:39725:3 false positive?
Hello, for a couple of weeks we see in our firepower system a great amount of Server-Webapp Drupal restws page callback command injection attempts. Firepower shows us the clients and said the issue came from the AviraUpdate Client. But why should the...
Hello freinds pls see attachment , i m getting "cannot allocate memory " when i copy asdm from tftp thanks ibrahim
Hi, I have Cisco ASA 5585-X with description on the below: Mod Card Type Model Serial No. --- -------------------------------------------- ------------------ ----------- 0 ASA 5585-X Security Serv...
Hi, As per the documentation FireAMP blocks malware based on known hash and Firepower and can hold the file for 30 secs to get the verdict. In case if the verdict is unknown by FireAMP then can we use the ClamAV engine which is part of local malware ...
Hi Experts, 1. Does firewall inspect UDP traffic like TCP, do I have to allow return traffic for UDP. 2. for e.g: I have a rule which says traffic that's being sourced from inside (10.10.10.10 ) going to outside (20.20.20.20) on UDP port 33000 i...
I have run into an issue where redundant devices devices behind an ASA that are using it as a default GW are having problems at failover when there is a MAC change on a VIP. The cisco CSS utilizes gratuitous ARPs on failover, and until the arp cache ...
Gents, I would like to know your opinion on the below design to protect the servers of critical business applications from the operational staff. I made my ASA the Gateway for the critical business applications' servers. Means any user accessing ...
Hi, We have a FirePower 8350 appliance configured for IPS "monitor-mode" or IDS mode. The FirePower appliance connects directly to our Nexus 9k core switches. We have SPAN configured on this core switches to send a copy of the traffic to the FirePo...
I have a Firesight 1500 system running 6.2.2 I am trying to launch a manual NMAP scan of a host by going to system--tools--scheduling and selecting NMAP scan the problem is, when I select a scan, the time, etc. I don't have the option of spec...
Hi all, please for your help on the below. I am trying to rate-limit a couple of internal subnets for traffic to the Internet, to keep them from overwhelming our Internet feed (50Mbps) but the limit does not work. I have set a maximum input/ouput p...
Resolved! Asymetric NAT ASA Working?
Hi, this is a weird question, but I have this customer, that asked me to give them a reason why this was happening: They configured a static NAT on their FW. Easy one, just changing the IP source of one Server X.X.X.X, to IP address Y.Y.Y.Y; when goi...
Hi, I am working on a ASA5520 (V9.1) and have some trouble in understanding the ACL configured on the internet interface. The two ACLs are applied on the out direction of internet interface. !access-group internet_access_out out interface internet!...
