Network Security

We installed a new Ooma VOIP phone system and it works everywhere but our main office. We were told by Ooma that we needed to open the ports on the firewall to allow for the traffic. UDP 53, UDP 123, UDP 514, UDP 1194,UDP 3386, UDP 3480, UDP 10000-30...

Hi everybody, I'm trying to configure a site-to-site VPN tunnel between 2 ASA 5506-X but my VPN never goes up. I don't see active tunnels from ASDM. The site A has a public static IP address connected to the interface Ge 1/1 and the site B has a dyna...

Hello, Via the CLI what is the best way to see what is eating our bandwidth on the outside interface?  I'm going to set up Netflow shortly, but in the meantime can the CLI quickly show this as I don't have access to the ASDM as I know this can show ...

Hello, I have a 5512-X in my home lab and recently just set it up in transparent mode and installed FirePOWER on the SSD. I have just noticed the following and wondering what this is, and why it has the addressing it has - UK-ROB-5512X-01# sh int ip...

Hi,I work in a company, and recently we bought a firewall ASA5505-50-BUN-K9.Normally, this firewall support up to 50 users connected with VPN, and it support 3DES/AES.But, when i check this features using show version command, i get:ciscoasa# show ve...

I am trying to use the ASAv on AWS and have followed the documentation on how to build the configuration for the EC2 instances.   I have 2 additional interfaces.  I have added EIPs on the outside and mgmt interfaces I have created the day zero config...

Hello, we have ordered  L-ASA5585-60-TAM 3Y 4pcs and I've received an authorization key qty 4pcs and I'm not sure it will start when we have ordered or after activating  Thx for your support Amirkia

Hi everybody, I wanted to ask if it's safe to upgrade an ASA Active/Standby cluster running 8.6(1) image, to the new 9.4(4) version. Following the upgrade page indications (https://www.cisco.com/c/en/us/td/docs/security/asa/migration/upgrade/upgrade....

Some ISP's may block (seen in Bangladesh and China) ESP. Or you might suspect that the ISP limits the BW for ESP. But you dont see the same for AnyConnect clients or vpn tunnels using NAT-Traversal. Normally NAT-T is auto negotiated, and this is in g...

Hi All, Due to high memory utilisation, Cisco TAC have advised that I execute the following command; "object-group search access-control" I'm keen to understand the impact of the command, and determine the actual changes being made in executing the...

Hi to all.In my Cisco ASA 5550, I need to set two different syslogs servers, and I need to send the system logs to the first one (only admins login/logout), and the traffic logs and all the rest (informational level) to the second one. Do you know if...

I was wondering if anyone has a baseline syslog message configuration. I know how to setup syslog and understand the logging levels, but I am looking to capture mostly warnings with some informational messages being elevated to warning status (exampl...