Network Security

Dear all, I need to capture packet go through VPN tunnel on ASA. I try to follow guide line with link bellow, but it show packet buffer empty. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118097-con...

Hi Folks,  Any feedback on the following idea appreciated.  Thinking to create an IPS policy with no http pre processing outbound. Then create an IPS policy with pre processing inbound.  I'm thinking I don't care so much if my trusted servers/client...

Hi, I have ASA5515 and assigned by ISP first IPs block with multiple NATs on 'outside' interface. Now I am given secondary IP block (completely different set of IP subnet) by the same ISP. I want to use new IP block to create NAT. I have configured I...

Hello, I am working on a DMZ design for a public website and I'm trying to find some information on the performance of the SSL decryption on both FirePOWER devices (such as the 7000/8000 series) and for the FirePOWER service on the firewall itself (...

How do I go about performing PAT on the Cisco ASA? I have a device on the internal network that is using 443 (https://website.com:443), but what I want from the external is for someone to connect to this website using port 444 (https://website.com:44...

Hi,  If you have say 5 subnets of different traffic requirements 1/ corporate users 2/ payment equipment subnet 3/ dmz 4/ corporate wifi 5/ some other requirement Would one get better IPS recommendations if you created 5 IPS policies and defined the...

Hi All, Would anyone be aware if we can auto scale the Firepower NGFW in AWS? We have several Firepower devices in our AWS environment and i would like to know if there's a way that we can auto scale them. I've worked with Checkpoint before in AWS a...

Hi folks, ASA newbie here. I had what I thought was a decent grasp on how to configure a 5505 from factory settings, but I'm having trouble with some basic functionality.  Currently I'm unable to ping out from the ASA itself to anywhere on the outsid...

Hi Everybody Thanks in advance for your help. My company have a CISCO ASA 5505. Until a few days ago, only with the base license. And we have activate up to 25 AnyConnect Essentials. We bought a "Security Plus license", for use VLAN Trunk Port. The p...

ASA 9.4(3)12 There is an access list assigned to the interface inbound. Access list contains ACE entries. Possible issue noticed - when disabled one of the entries with hitcnt 0 - there was traffic interruption, so that led to conclusion that hit cou...

Hi guys! I need some help with the Access Control policies. I'm trying to block YouTube for some object groups but when I block https://www.youtube.com I see other links of YouTube that are allowed, like: https://img.youtube.com https://s.youtube.com...

We've been trying to run a packet capture on our FWSM via the ASDM and the capture is not capturing any packets via any of the interfaces.  Have also tried this via the CLI and no luck,  Can anyone help? PDC-FWSM-01# sh version FWSM Firewall Versi...

I have ASA Firepower Licenses valid for about 2 more years + the infinite control license. Suddenly, none of them are being detected anymore. If I check the licenses section all show as installed and with expiration date of 2019. But most of the rule...