Network Security

ASA 9.4(3)12 There is an access list assigned to the interface inbound. Access list contains ACE entries. Possible issue noticed - when disabled one of the entries with hitcnt 0 - there was traffic interruption, so that led to conclusion that hit cou...

Hi guys! I need some help with the Access Control policies. I'm trying to block YouTube for some object groups but when I block https://www.youtube.com I see other links of YouTube that are allowed, like: https://img.youtube.com https://s.youtube.com...

We've been trying to run a packet capture on our FWSM via the ASDM and the capture is not capturing any packets via any of the interfaces.  Have also tried this via the CLI and no luck,  Can anyone help? PDC-FWSM-01# sh version FWSM Firewall Versi...

I have ASA Firepower Licenses valid for about 2 more years + the infinite control license. Suddenly, none of them are being detected anymore. If I check the licenses section all show as installed and with expiration date of 2019. But most of the rule...

Hi, I know we have to power off in order to install new interface card on ASA. in single FW, there is no option to avoid service outage until the firewall back up. but, in case of HA mode between FWs, is there any way to avoid service interruption o...

All,  What way would you use to advertise public IPs to ISP. I have a range used between me and ISP for BGP connection. I am further given a range of public IP which I need to advertise to provider. The public range will be used for natting of dif...

Hi i have a one of the above deployed in our DC with Static routing currently configured. ASA Version 9.8(1) We are having AWS direct connect installed and i plan to terminate into this firewall however this will require BGP Protocol that is current...

Base diagram I configure configure ASA as Transparent mode deploy in LAN 192.168.1.0/24, but administrator need to remote to manage from other LAN 192.168.2.0/24. The problem is that Transparent don't support routing, How do I configure default gat...

 I'am planning to migrate my ASA5506 from ASA/FirePower Module Configuration to Threat Defense Config. 1. I created a Smart Account and a Virtual Account in Smart Software Licensing. 2. In PLR / "PAKs and Tokens"  i assigned the already fulfilled Co...

Just wanted to ask if you encountered one SVI which is configured HSRP showing both active state on the Nexus F3 A and Nexus F3 B. QMS-BRC-N7010-F3-INSIDE-A# show hsrp brief | include Vlan3809 Vlan3809 3809 110 P Active local unknown 10.90.250.73 (c...

Hi Guys, Just wondering if i could get some help with setting up a port forward for a camera system using a cisco asa 5506 locally the server IP is 192.168.0.5 the camera system uses port 22609 via local host  i need to be able to access the came...

I've got ASA 5555x delivered for my client and the migration scope is to migrate from ASA9.0 to FTD. I've converted ASA configuration using FMC VM on my machine. When I enable the migration tool on FMC, it gives me following message on FMC. "MIGRATI...

hi all   i need web application firewall in my network  Is firepower  can work as web application firewall (FPR2140-ASA-K9) ? if not what is your suggest form another vendor ? your help is highly appreciated  BR 

Hello all, Apologies if I placed this in the wrong forum - this is more of a FirePOWER general inquiry. I have implemented TAMC on an ASA 5506 and I'm managing FirePOWER services on the ASA itself via ASDM. I have the balanced IPS policy in place, as...