Network Security

Have an ASA5520 running 9.17 code. It currently has the following NAT statement in it: object network obj-10.10.1.1 nat (inside,DMZ) static 172.252.252.252 I have a need where I need this 10.10.1.1 host to be able to communicate with 2 specific hos...

Dear All, Hope all is well. We are an ISP of 2 Gbps backbone bandwidth, and want to have a security appliance on our backbone to keep our own and our customers network secure. What would you guys recommend? Thanks in advance for your replies.

Hi I have a group of dynamic objects defined by FQDN in mulitple ASA 5506/8-X. Somehow after ugrading ASA software from version 9.6(1) to anything later, the DNS resolver fails. Same config, nothing changed. My remote sites are doing IKEv2 site-to-si...

Hi Cisco Community , I am deploying Firepower 6.2 version on one of customer ,i really fed up with some problems ,everyday i face with problems such as blocking for example Russian Dating site ok.ru ,I tried to create object and add it on my URL pol...

Good morning. We have a couple of Cisco 525 PIX firewalls that we will be surplusing to our organization. The problem is we are unable to remember what the passwords are in order to go in a wipe the configuration files. So rather than go through the ...

Hi Team, We have any connect VPN and Firewall VPN IP is registered to a domain with SSL Certificate. So remote client can access any connect url with domain and IP as well to connect VPN. In this scenario, we need to restrict the Any connect URL thr...

i have purchased old cisco pix 515E i am unable to add ip on interfaces file 5: origin:16646144 length:308pixfirewall#pixfirewall# nameif insideType help or '?' for a list of available commands.pixfirewall#pixfirewall# config tpixfirewall(config)# in...

Hi,  We are seeing a weird behaviour of information being retained on the FMC even after purging the database. E.g. We have purged all the connections & host information from the purge tab under system. I have also deleted all the logs from the conte...

Hello experts, We have a network monitoring system (PRTG) in our network, which is using pings and other protocols to check some external IPs. Till now, we have used FirePower module in monitor mode only. As soon as we try to pass traffic to SFR modu...

When configuring a BOM in CCW and after checking the datasheet, I am confused why 21xx and 41xx have three different appliances: NGFW, NGIPS and AMP. What I see is they all have the same software image and same price. what are the differences? do the...

Hello experts, Good day! I have this device, Cisco ASA 5515 with version ASA 9.5(2)2Can we do a load-sharing on our internet bound traffic with 2 internet circuit coming from 2 different ISP?What we plan to do:1. Users on VLAN10 will route through IS...