Network Security

Hi all, I've been asked a question about a customer who uses AnyConnect for access to a secure network from related networks in their organization, some of which use TLS-decrypting proxy servers. I realized that there are a number of possible scenari...

I have mentioned the ASA firewall config .. I want configure SSH only for the below interface..  interface Port-channel10 lacp max-bundle 8 nameif ASA-OUT security-level 0 ip address 10.246.17.145 255.255.255.248 standby 10.246.17.146 Please do the...

Hello, I am using CISCO ASA 5585. While most of the users could browse one particular website few cannot. I captured the packets against the solution provided for "MSS Exceeded" but didn't find any packets captured against the match. So, the probl...

Hello, I have two pools DHCP pools configured on the ASA Firewall, the clints on two different WLAN Networks are getting the IP addresses from the same pool sometimes they get it from the right pool sometimes from the other pool, on the WLAN controll...

Hello Guys, I have a pair of Cisco ASA 5585 (Active-Standby). Can any one confirm the following: 1. Does the secondary ASA generate SNMP traps so that the same can be monitored in NMS? 2. Is this possible to get hardware information like Chassis temp...

I have IPSec VPN tunnel on ASA 5555-X between two sites. A few application disconnect automatically after working normally for 1 minute. These applications work fine for users accessing locally. The ASA code is 9.4.4

Hello! I have to Cisco ASA 5515 in Active/Standby mode. Can in install Firepower module only in Active ASA? Can i move SFR from Active to Standby if Active fails? Thx in advance!

Hi, I am trying run "more system:running-config" but it's not taking on Cisco 4140 firewall version 9.6. We are running on multi context on this ASA and i am try to see VPN pre shared key on one of the context. Please any one help me is this command...

Hey, I'm trying to make outbound SSL decryption work but have been facing many issues. When I apply an SSL inspection policy I'm having really weird results (see issue below). Right now I only have one rule in my SSL policy : decrypt everything from...

Hi,  Hoping to avoid a reboot or services restart. Does anyone know if you still need to reboot/restart firepower once a custom Application detector is applied? Using version 6.0.1.2

I am deploying ASA5525-X with Firepower IPS using Firesight 750 appliance and I need some basic guidance. I have defined ACL on the firewall with logging enabled and directling all accepted traffic to IPS sensor. Now since the ACL's are enabled with ...

I recently configured a new, named interface on my ASA.  I then rebooted the ASA and went to FMC to add this new interface to a security zone.  I could not get FMC to see the new interface.  I ended up having to delete the ASA from FMC and re-add to ...