Network Security

I am trying to migrate checkpoint configs to ASA 5585 using SCT tool, this tool asking me to feed it *.W file from checkpoint which is suppose to be a rule definition file on CP, but I cant find it, does anybody have any clues on this ?-regardsAB

Dear Friends, I have an issue with my ASA 5510. I will describe my scenario a little bit: 4 interfaces occupied (Outside, DMZ, LAN, Branch Offices). Outside for internet of-course, On DMZ email and web services (Everyone can reach this network even f...

Hi, Our monitoring system stopped reaching our ASA firewall over snmp, after a software upgrade to 9.4(3)12 I've checked the configuration and it seems ok. What should I look for? How can I restart the snmp service on the firewall? Regards, Filipe...

Hi  I have trouble launching asdm, i have enable the https access. but when i run on browser after adding expception on firefox i get below error404 Not FoundThe requested URL /admin/public/index.html was not found on this server.   I added the url o...

Hi Team, I have been having a problem with loading ASDM on to my ASA in GNS3 (v1.5.3). The connection is an ASA to the switch which is then connected to the Cloud (with loopback interface) as shown below. I cannot ping the Cloud from the ASA and vic...

Hello I have ASA5512-FW , ASA Version 8.6(1)2 I have 5 WAN IP addresses & I want to NAT my Internal Mail server with one of these IP address ex. 111.*.*253, so below is the chunk configuration of my ASA. Problem : I have taken a Packet capture it w...

Does anyone know if there is a way to reset the external authentication configuration on FMC through CLI?  the reason I ask it is that I tried to Enable Client Certificates (for CAC authentication) on the box and since then FMC failed user authentica...

I have two ISP outbound circuits connected to a 5520  ASA version 8.4(7).   I can't figure out how to create a route based on source ip rather than destination IP.   In a nutshell, I want to route WIFI and web conferencing via one interface and web ...

good morning, i'm purchasing an ASA5506X plus AsaFirePOWER license, but i didn't have found a paper or sheet explaing which is the starting date of AsaFirePOWER license. i have this doubt so i need to know if license starting is since purchase date...

Hello all, I am planning to upgrade an ISE distributed deployment from release 1.4 to 2.1 and I have few doubts I'd like to dispel with you. Here is the architecture :  - 1 PAN  - 2 PSNs  - 2 MNTs According to the upgrade procedure, distributed depl...

 Hello all! I've successfully configured VXLAN support on ASA according official guide (http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/interface-vxlan.pdf)  I have VXLAN-VXLAN routing and VXLAN...

Running recent matched pair of ASA/ASDM on ASA5512-X.  I can launch ASDM fine from patched windows 7 machine.  When I try on patched windows 2012 R2 server I get login box back with red "cookies must be enabled to login" message.  Has anyone see this...

Has anyone discussed the options with the 5512/5515 models going end of life and whether or not they would consider the newer 2100 models versus the 5516/5525 models? I had a few questions and was wondering if anyone has dealt with the new models com...

Hello, I have Cisco ASA 5515-X devices with Firepower services managed by FMC 6.1.0.2 and TAC (IPS and URL) licenses.  I have few questions about it:  -  Is it possible to allow  specific YouTube channel for a specific group of users, but block all o...