Network Security

Just wanted to confirm a particular design with active/standby firewalls and dual ISP links. Normally the best practice says to have a switch stack between the firewalls and ISP links, however in my case the outside switches are in separate wiring cl...

Hi Proffs, Currently, i have Cisco ASA 5512-x as edge device having external link to a single ISP, connected to cisco 2960 switch internally and behind the switch are production servers. There is a three site to site VPN link from the servers's nated...

hi I have a problem with the graphical interface of the firesight 4000, when I try to make enter my user and password a blank page is displayed and I can not enter the dashboard With the SSH I can enter the console with the same user password thank y...

If I get the FTD 4100 appliance with an ASA image, can I still get firepower services? Does it work similarly as having as ASA5585 with firepower? Please provide pros/cons for both scenarios if possible. Thanks in advance

I have an ASA 5516x w/FirePOWER running ASA version 9.5.(2).10 and with 6.0.1 SFR module. When we begin running backups over a VPN tunnel that is connected to an outside interface on this ASA we begin having high latency from our internal network on ...

Hi, We are currently running our 8250's in an IDS mode and we are changing to an IPS mode.  We have lots of rules which are now resulting in a "would be block", that is going to change to a Block result. To ease the migration I'm looking for ways of...

Dear All, I know the FTD does not support yet but was hoping to bounce some question I had myself about clustering and multicontext on the asa/4100 Firepower 21/41xx with ASA image: · How many “Logical Devices - ASA” supported? · How many cont...

In the attached where I have a Transparent Mode ASA with a few bridge groups (10 and 20), when assigning my Service-Policy which redirects traffic to the SFR, does this apply to traffic "inbound" on the Interface I apply it to. E.G I apply the servic...

Hello, I am implementing a new asa firewall that will act as both a dhcp server and dns resolution (forwarder?) for inside clients. There is NO internal DNS or DHCP server nor will there be, the ASA will do both of those functions. The dns server ent...

Hi I have a Cisco ASA 5510 in single mode that is used for IPsec VPN site-to-site tunnels. I would like to migrate the VPN tunnels onto a 5525X running in multiple context mode (i.e., create a new context and move the configuration onto it). Does ...

What happens when there is a TCP half closed connection ? How long the connection remains alive before it gets closed ? Is there a specific setting in ASA to manage half closed TCP sessions ? These are the questions asked to me during network securi...

Good day.  I work in a high security network and after recently installing CSM 4.11 on Windows Server 2012 R2 I need to install a 3rd party SSL certificate to remediate a vulnerability with CSM using a self-signed cert; our security requirements stat...