Network Security

Hi, I was trying to create split tunnel acl  using asdm. when adding ace  (eg: 192.168.5.10) asdm giving me an error "address cannot contain 192.168.5.10)  I have a static nat to the  192.168.5.10 .  asa version 9.4.2 Thanks

Hi All, While testing an application, we found that the session between the our virtual IP, and the backend server,  is established over the firewall, and disconnected immediately. So the connection log shows "duration 0:00:00 bytes 0 TCP FINs" (atta...

Правильно ли я понимаю   embryonic-conn-max – это общее ограничение на полуоткрытые сессии. Не на конкретный хост, а на все которые у нас есть.. т.е. если у нас 500 сайтов работающих по 80 порту, то 10000 делиться на все 500 сайтов. Так?   per-client...

Hi There. Is there any chance I can get when was instaled the Licensing on a IPS 5525  on CLI?, Im looking for an answer and I got this form IME: But it is not clear for me . I´ll continue in my search Thanks in advance

Site A has a very large IP block (otherwise we would have used 1:1 NAT) Site B has 20 hosts Site A primarily initiates traffic to Site B; any host at site A is allowed to connect Site A has 2 network links in to Site B  It will route traffic through ...

Hello, I'd like to know if it is possible to configure a cluster with asymetric topology. for example let's say I have nodeA in Datacenter A and nodeB ind Datacenter B. Both nodes are connected to the same local LANs, but nodeA ge0/0 is connected to ...

Hi, I've got a pair of ASA 5545's running OS v 9.3(3)2 and the IDS/IPS Modules are also enabled. We wanted to upgrade the OS to v.9.6(3)1 which according to the release notes should be no problem. It is though ! The Standby ASA had the image flagged ...

Hello, I just got started with the FMC1000 and I would like to use the 2nd NIC as a backup between our two distribution switches.  Linux has supported bonding from version 2.0 and I doubt that Cisco would have build the FMC on something that old. Can...

Hi there,recently i bought and installed new SSL certificates for the ASA, but the old invalid certificate still on the firewalli am thinking to delete it but im afraid its gonna cause some problemsanyone have some advise whether i should remove or c...

Hello! Due to a software appliance that is sitting behind my ASA, my logs are flooded with this kind of messages: Duplicate TCP SYN from Public DMZ: 206.81.189.10/58640 to Outside: 52.84.27.22/80 with different initial sequence number This is a legit...

We have a version 5.4.x Firesight VM managing two 5525-X Firepower services and we are trying to upgrade to FMC6.2. Plan is to: 1. Build a brand new FMC 6.2 VM 2. Manually migrate policies to new FMC 3. Schedule down time to upgrade the firepower mod...

hi, just a quick one, if adding an ASA active-standby FW in ACS 5.4, do i just create a single entry? meaning I only add a device using the 'active' IP address?