Network Security

Hi,  If you have say 5 subnets of different traffic requirements 1/ corporate users 2/ payment equipment subnet 3/ dmz 4/ corporate wifi 5/ some other requirement Would one get better IPS recommendations if you created 5 IPS policies and defined the ...

Hi All, Would anyone be aware if we can auto scale the Firepower NGFW in AWS? We have several Firepower devices in our AWS environment and i would like to know if there's a way that we can auto scale them. I've worked with Checkpoint before in AWS an...

Hi folks, ASA newbie here. I had what I thought was a decent grasp on how to configure a 5505 from factory settings, but I'm having trouble with some basic functionality.  Currently I'm unable to ping out from the ASA itself to anywhere on the outsid...

Hi Everybody Thanks in advance for your help. My company have a CISCO ASA 5505. Until a few days ago, only with the base license. And we have activate up to 25 AnyConnect Essentials. We bought a "Security Plus license", for use VLAN Trunk Port. The p...

ASA 9.4(3)12 There is an access list assigned to the interface inbound. Access list contains ACE entries. Possible issue noticed - when disabled one of the entries with hitcnt 0 - there was traffic interruption, so that led to conclusion that hit cou...

Hi guys! I need some help with the Access Control policies. I'm trying to block YouTube for some object groups but when I block https://www.youtube.com I see other links of YouTube that are allowed, like: https://img.youtube.com https://s.youtube.com...

We've been trying to run a packet capture on our FWSM via the ASDM and the capture is not capturing any packets via any of the interfaces.  Have also tried this via the CLI and no luck,  Can anyone help? PDC-FWSM-01# sh version FWSM Firewall Version ...

I have ASA Firepower Licenses valid for about 2 more years + the infinite control license. Suddenly, none of them are being detected anymore. If I check the licenses section all show as installed and with expiration date of 2019. But most of the rule...

Hi, I know we have to power off in order to install new interface card on ASA. in single FW, there is no option to avoid service outage until the firewall back up. but, in case of HA mode between FWs, is there any way to avoid service interruption or...

All,  What way would you use to advertise public IPs to ISP. I have a range used between me and ISP for BGP connection. I am further given a range of public IP which I need to advertise to provider. The public range will be used for natting of differ...

Hi i have a one of the above deployed in our DC with Static routing currently configured. ASA Version 9.8(1) We are having AWS direct connect installed and i plan to terminate into this firewall however this will require BGP Protocol that is currentl...

Base diagram I configure configure ASA as Transparent mode deploy in LAN 192.168.1.0/24, but administrator need to remote to manage from other LAN 192.168.2.0/24. The problem is that Transparent don't support routing, How do I configure default gatew...

 I'am planning to migrate my ASA5506 from ASA/FirePower Module Configuration to Threat Defense Config. 1. I created a Smart Account and a Virtual Account in Smart Software Licensing. 2. In PLR / "PAKs and Tokens"  i assigned the already fulfilled Con...