Network Security

I'm having an issue on my DMZ with long DNS lookups.  A Cisco ESA (Email Security Appliance) sometimes quarentines email because of DMARC failure.  In reality it is not able to obtain the full SPF record because it is longer than 512 bytes, and for w...

Hi I recently started working with ASAs running the FTD image, both with FMC and FDM and loving it so far.For now, i mostly worked on single site deployment. I'm asked to design a network that includes 3 sites, HQ and two branches.HQ has 20 users and...

Hi,I upgraded our AIP-SSM-10 with the image IPS-SSM_10-K9-sys-1.1-a-7.0-1-E3.img. But now when i try to log in i get the following error "authentication token manipulation error" I get this with the very first logon to session one with the default c...

I cannot ssh to the inside of the asa via vpn when the inside ip is a BVI. I enabled management access inside and i received tcp intercept drops my connection. If I enable management access via a specific interface like inside_1->inside_7 i get canno...

HiI am trying to setup an IPSec VPN from ASAv in Azzure to on-premises firewall(ASA5515).I am pasting the relevant configuration from ASAv here object network OBJ-AZURE-LONDON-247 subnet 10.247.2.0 255.255.254.0object network OBJ-LON-ONPREM subnet 10...

Hi We have purchased "FS-VMW-10-SW-K9" for our Firepower Management Center virtual appliance.Two questionsThis means we are able to manage up to 10 Firepower Devices/Sensors?If we need to add device/sensor 11 and 12 would we need to purchase a separa...

Hellow happy people,   Did any one enabled automatic backup of ASA configuration using EEM. I am going to try it out. What will be the challenge which i can forsee before i go ahead? Something like high cpu/mem utilization etc.. event manager applet ...

Hello guys, I would like to know what is the minimum latency required to deploy FMC in HA. In documentations I can't found these informations. Best Regards,

Our company is a SaaS provider.  Our security team requests that the OUTSIDE_Inbound ACL be expanded to include ACEs which reject entire countries via lists of subnets.   The ACEs number in the thousands.  The network team's concern is 'flatlining' t...

Hi everyone,I found some designs in our network which I haven't seen in any configuration guides. I hope that someone can have a look at our network and point out some design errors or missconfigurations. Attached you'll find a picture with the topol...