Network Security

How to obtain netmods Serial numbers from th sourcefire 8120

Hi, My customer would like to buy an smartnet total care contract for his Sourcefire 3D8120 now called Firepower. The customer has intalled networkd modules but doesnt know the serial number of this modules. How can we obtain this serial numbers fr...

Resolved! Making Changes on Secondary ASA in HA Pair while it is Active

Hi All, I had an early AM issue on the HA pair 5520 in my data center the other day which basically forced me to make the Secondary ASA in the pair the active unit. I need to keep it this way for some time, but I have other duties that require me to ...

Resolved! 2x ASA 5516-X Single Context 3 ISP config

Hello All, I have just configured a HA Active/Standby pair of ASA 5516-X in single context mode with dual ISPs. I also have another ASA5510 with a separate ISP that we use for our public wifi VLAN(2). I would like to decommission the ASA 5510 and ...

Route subnet across existing VPN tunnel

Hi. I'm looking to accomplish exactly what's posted in this link. https://supportforums.cisco.com/document/12110341/routing-traffic-between-two-site-site-vpn-tunnels However, I can't seem to get traffic from point C back to point A. If i packet trac...

ASA Firepower Access Control rule failure

Hello guys, I have strange problem with ASA Firepower. So that, I added SOCIAL_URLs to block social network links. In generally it works. But, when i try to add network condition (source network) to the rule traffic does not match with this rule. Let...

Unable to access ASA 5508-X per Quick Start Guide

New ASA 5508-X. Following Quick Start Guide and cannot access device at HttpS://192.168.1.1/admin. In IE the error is to enable TLS 1.0, 1.1 or 2.0, and in Chrome I get "SSL Version or Cypher Mismatch". I've seen a few different posts on this top...

SSH Issue after 9.6

Hello, i have issue after upgrade to 9.6 , i am not able to access ssh with the same ip anymore , as show in the attached photo i can do ssh from any interface , and from any ip behind that interface. that happen only when i upgraded , also after i...

Resolved! Url Testing - known urls that should block

Hi peoples Does anyone know definate Urls that should generate a match for Url Rules? Would be handy to be able to test a few categories. For example, Take the Auction category, I would expect www.ebay.com to have generated a match. ( I have the sett...

Resolved! Moving configuration from 8.2 to latest 9.x code

Upgrading the OS on the core firewall, which of course WILL break the configuration, I know, been there, done that. My main concern is if I copy the configuration to the new ASA code on another appliance, and repair it, will all my certs be there, o...

ASA 5510 IOS upgrade to 9.0.4-38

Went to upgrade my 5510 from 9.0.1 to 9.0.4-38 yesterday. Configuration on all boxes involved have not changed. After upgrade, connection to internet failed. Roll back and connection to internet resumes. Any ideas????? Attached is a high level di...

QOS on a 5525X

I have a 5525X that I need to impliment QOS on, i have no experiance with QOS. I need to allow a single IP address on the inside, unrestricted bandwidth no matter what else is going on, this is over a VPN Connection. Our DR is on this remote site as...

ASA Firewall

Dear All, how to configure ASA firewall and site to site vpn methodologies.

Resolved! Enable password on ASA 5516 version 9.5

Hi Guys, Is it possible to have a second enable password on a Cisco ASA5516 firewall running version 9.5? If so, please provide me with the commands to do it on the CLI? Any help would be greatly appreciated. Thanks, Lake

Firesight drops all traffic and stops the business

Hi all, I seeking for some help for one issue that i am facing with one ASA and firesight. To briefly explain, our company is providing an IT infrastructure to small companies. Basically, the clients connect via RDP from the internet to our systems,...

Multiple VLAN Connectivity - ASA 5516

I have an ASA 5516 and a Catalyst 2960 X. I have created 2 sub interfaces 192.168.11.0/24 and 192.168.12.0/24 on interfaces gi 1/1.11 and gi 1/1.12. I have a cisco 2960 x switch connected to gi 1/1 interface of the firewall. I connected one laptop i...

Network Security

Forum Posts

How to obtain netmods Serial numbers from th sourcefire 8120

Resolved! Making Changes on Secondary ASA in HA Pair while it is Active

Resolved! 2x ASA 5516-X Single Context 3 ISP config

Route subnet across existing VPN tunnel

ASA Firepower Access Control rule failure

Unable to access ASA 5508-X per Quick Start Guide

SSH Issue after 9.6

Resolved! Url Testing - known urls that should block

Resolved! Moving configuration from 8.2 to latest 9.x code

ASA 5510 IOS upgrade to 9.0.4-38

QOS on a 5525X

ASA Firewall

Resolved! Enable password on ASA 5516 version 9.5

Firesight drops all traffic and stops the business

Multiple VLAN Connectivity - ASA 5516

Meet and congratulate the February 2023 Spotlight Awardees!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Old NAT ASA Config Question

Set up FMC on Azure

How to set it up eNcore outputters to connect with the Elasticsearch

High CPU load at the FMC (7.0.4) caused by python3 processes

Connect with anyconnect to ftd internal interface eg. guest-wlan

Can't login to FTD GUI

ASA5525 HA pair: ASDM only accessible to secondary (not primary)?

LOCAL Server Group Account Lockout

Disable SSH v1 and telnet on FTD via CLI or FMC?

Changing session timeouts, logging/syslog, etc. on FMC?