Network Security

Mike here.  I'm a (very) junior engineer and I've been asked to configure a failover solution for our ASAs.    A more experienced engineer recommended the attached design (or at least my novice interpretation of it.) I appreciate any and all input.  ...

Hi there, I would like to migrate ASA5525-X v9.2 Failover pair (ssd but no firepower) direct to FTD image (v6.2+) & utilise smart licensing.Its under partner maintenance & PICA software access. I have created a smart account for our company.  Are the...

Hi, I was trying to create split tunnel acl  using asdm. when adding ace  (eg: 192.168.5.10) asdm giving me an error "address cannot contain 192.168.5.10)  I have a static nat to the  192.168.5.10 .  asa version 9.4.2 Thanks

Hi All, While testing an application, we found that the session between the our virtual IP, and the backend server,  is established over the firewall, and disconnected immediately. So the connection log shows "duration 0:00:00 bytes 0 TCP FINs" (atta...

Правильно ли я понимаю   embryonic-conn-max – это общее ограничение на полуоткрытые сессии. Не на конкретный хост, а на все которые у нас есть.. т.е. если у нас 500 сайтов работающих по 80 порту, то 10000 делиться на все 500 сайтов. Так?   per-client...

Hi There. Is there any chance I can get when was instaled the Licensing on a IPS 5525  on CLI?, Im looking for an answer and I got this form IME: But it is not clear for me . I´ll continue in my search Thanks in advance

Site A has a very large IP block (otherwise we would have used 1:1 NAT) Site B has 20 hosts Site A primarily initiates traffic to Site B; any host at site A is allowed to connect Site A has 2 network links in to Site B  It will route traffic through ...

Hello, I'd like to know if it is possible to configure a cluster with asymetric topology. for example let's say I have nodeA in Datacenter A and nodeB ind Datacenter B. Both nodes are connected to the same local LANs, but nodeA ge0/0 is connected to ...

Hi, I've got a pair of ASA 5545's running OS v 9.3(3)2 and the IDS/IPS Modules are also enabled. We wanted to upgrade the OS to v.9.6(3)1 which according to the release notes should be no problem. It is though ! The Standby ASA had the image flagged ...

Hello, I just got started with the FMC1000 and I would like to use the 2nd NIC as a backup between our two distribution switches.  Linux has supported bonding from version 2.0 and I doubt that Cisco would have build the FMC on something that old. Can...

Hi there,recently i bought and installed new SSL certificates for the ASA, but the old invalid certificate still on the firewalli am thinking to delete it but im afraid its gonna cause some problemsanyone have some advise whether i should remove or c...

Hello! Due to a software appliance that is sitting behind my ASA, my logs are flooded with this kind of messages: Duplicate TCP SYN from Public DMZ: 206.81.189.10/58640 to Outside: 52.84.27.22/80 with different initial sequence number This is a legit...