Network Security

Hi,We have a couple of ASA 5515/wIPS in active/standby mode. They both have exactly the same licenses. The Cisco anyconnect VPN client works just fine with the primary ASA, but doesn't work (can not connect) with the stand-by one. Is that a normal an...

Hi Everyone . I try to configure AAA on ASA 5555 running version 9.6(3)  with LDAP over TLS 1.2 not working  but over SSL It's working  I would like to make sure ASA not support LDAP over TLS 1.2   Please advise me .   Thank you .

We have a Pair of ASA-5585 System configured as an Active/Standby pair.Every hour the system fails to to the current standby node. This has been an ongoing issue.here is a sample of that we are seeing at the time of the failover on the log.Mar 21 201...

Hi,   Can firepower / firesight, auto block an IP address if the IP generates an event or an alert. So rather than constantly blocking the attack, i would like FP to actually block the a fending IP for a set period.  

Hi,   I have been assigned to install and configure Cisco Firepower 2130 Appliance. but I am not getting where to start as I am not getting relevant documentation. Please clarify below points:    1. Cisco Firepower 2130 master bundle  2. Cisco Firepo...

Hi, We have 4 offices, each with ASA5516-X running regular ASA software with FirePOWER modules. Those 4 devices are managed by the Management Center running as w VM. All 4 also are licensed for AMP and URL modules.  We are considering adding high-ava...

Hi,   Experts I need your supports regarding my ASA 5520.   The current version is below: Cisco Adaptive Security Appliance Software Version 8.2(5) Device Manager Version 6.4(1) Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz Interna...

I have an ASA5508X, controlled by a vFMC. Both are running 6.2.2.0. The Firewall is configured as a VPN server, with Anyconnect 4.5.02033 client software loaded. As expected, I can browse to the correct URL, and have the Anyconnect software install i...

Hi,   I've got ASA 5506-X. The task is to provide access to Web server which is located in dmz from internet (outside). I use static NAT 192.168.120.254 (Web server)--> 95.67.82.153 (Public IP). Unfortunately, it is not working. I try different confi...

hi, i need to update the IKE phase 1 and 2 policies to a stronger method on an IOS router acting as an EZVPN server. to my knowledge on the EZVPN server "pushes" the IKE P1 and P2 policy to remote client.   my question does changing the IKE P1 and P2...

Hi guys,    I have ASA 5515 running at 9.6.(3)1. In logs I noticed a huge amount of very strange records.  Duplicate TCP SYN from INSIDE: A /52565 to INSIDE: B /3389 with different initial sequence number Where IP "A" is Windows VM.Even when I shutdo...