Network Security

Hi All, We are planning Firewall Software Image Upgrade. We have a cluster with 8.4(4)1 Image, And we wanted to upgrade to 9.1(7). As per Cisco Docs, Upgrade can be in two steps - 8.4(4)1-->9.1(2) -->9.1(7) And this cluster carries almost 3500 VO...

Nat Rule not working | Firewalling | Cisco Support Community // <![CDATA[ jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","ajaxPageState":{"theme":"ciscotheque_bootstrap","th...

Hi All, i am currently looking for learning and course detail for CCIE security track, will appreciate if anybody come up with help.

Dear all, I need to capture packet go through VPN tunnel on ASA. I try to follow guide line with link bellow, but it show packet buffer empty. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118097-con...

Hi Folks,  Any feedback on the following idea appreciated.  Thinking to create an IPS policy with no http pre processing outbound. Then create an IPS policy with pre processing inbound.  I'm thinking I don't care so much if my trusted servers/client...

Hi, I have ASA5515 and assigned by ISP first IPs block with multiple NATs on 'outside' interface. Now I am given secondary IP block (completely different set of IP subnet) by the same ISP. I want to use new IP block to create NAT. I have configured I...

Hello, I am working on a DMZ design for a public website and I'm trying to find some information on the performance of the SSL decryption on both FirePOWER devices (such as the 7000/8000 series) and for the FirePOWER service on the firewall itself (...

How do I go about performing PAT on the Cisco ASA? I have a device on the internal network that is using 443 (https://website.com:443), but what I want from the external is for someone to connect to this website using port 444 (https://website.com:44...

Hi,  If you have say 5 subnets of different traffic requirements 1/ corporate users 2/ payment equipment subnet 3/ dmz 4/ corporate wifi 5/ some other requirement Would one get better IPS recommendations if you created 5 IPS policies and defined the...

Hi All, Would anyone be aware if we can auto scale the Firepower NGFW in AWS? We have several Firepower devices in our AWS environment and i would like to know if there's a way that we can auto scale them. I've worked with Checkpoint before in AWS a...

Hi folks, ASA newbie here. I had what I thought was a decent grasp on how to configure a 5505 from factory settings, but I'm having trouble with some basic functionality.  Currently I'm unable to ping out from the ASA itself to anywhere on the outsid...