Network Security

Hi Guys   I'll be doing a migration from a pair of 5520's in active/standby to 5520-X's. My firewall knowledge is very rusty so I have a few basic questions.    1. I'm going from asa firmware 8.4 to 9.8. Will this be a simple copy and paste job or wi...

I’m configuring an ASA 5585X and want to know if there is a command that will configure the firewall to show when an administrator has acknowledged an error or alarm. I’ve already configured the device to send email alerts, but specifically I’m looki...

Hello every one   I have a ChackPoint firewall configuration that I need to convert to Cisco. Is there any tool I can use for the converting.  I have tried to download one from Cisco.com https://software.cisco.com/download/release.html?mdfid=28058280...

Hi Experts   Getting error while creating ECMP on FTD. Please see snapshot.

Hello All,   I am having some issues regarding ASA-5506 Firewall.  I currently have few routers and servers connecting to the outside with the following protocols on Cisco 2911's:   -OSPFv2 (Important) - HTTP -HTTPS - FTP -SFTP - ETC   I have tried f...

Hi All We have an ASA with a current software, without IPS functionality in use. We manage it through CSM. Is there a way to implement the free spamhaus.org DROP list as a drop list in the ASA, which would get updated automatically? Thanks

Ciao, I read in some post and I found that Firepower uses brightcloud.com as webfiltering DB. Is that right ? I'm looking for the URL sites lookup in order to some tests and recategorizations. Thanks

hi! having a problem with ASA 5506x, I have configured the the firewall on transparent mode, am able to ping 8.8.8.8 on the firewall. I have several switches in my LAN, the problem is when I connect one switch directly to the firewall and connect a c...

what is the minimum requirement for deploying FS-VMW-10-SW-K9 ?

Hello guys.. I meet one problem that I have no idea what and how to check. See below my network drawing, two firewalls (ASA5505) are there between PRC domain and DMZ domain and Business domain. One of my PRC domain server RAE (10.41.10.3) is looking ...

So I'm probably in over my head but I'm curious about the technical possibility of using RSPAN to mirror a particular vlan from one of my remote sites and sent it over RSPAN to a switch a our headquarters. I'm aware of the ramifications of saturating...

Hi Guys,   I want to check on how to redirect the ASA traffic into firepower for IPS and AMP. Current ASA global policy match the default-inspection-traffic. I suppose this does not match all traffic. Hence wondering  what the general best practice f...

We are trying to configure an IPsec VPN with a vendor. They are using a Palo Alto firewall. The tunnel is up and online but we are unable to RDP to some devices on our network from their side.  We have four devices in the 172.x.x.x range.  Can someon...

hi all,   i have a site to site tunnel, with an acl with three subnets, but we can access only one subnet, any idea what is wrong? thanks.