Network Security

Hi everybody, I'm trying to configure a site-to-site VPN tunnel between 2 ASA 5506-X but my VPN never goes up. I don't see active tunnels from ASDM. The site A has a public static IP address connected to the interface Ge 1/1 and the site B has a dyna...

Hello, Via the CLI what is the best way to see what is eating our bandwidth on the outside interface?  I'm going to set up Netflow shortly, but in the meantime can the CLI quickly show this as I don't have access to the ASDM as I know this can show i...

Hello, I have a 5512-X in my home lab and recently just set it up in transparent mode and installed FirePOWER on the SSD. I have just noticed the following and wondering what this is, and why it has the addressing it has - UK-ROB-5512X-01# sh int ip ...

Hi,I work in a company, and recently we bought a firewall ASA5505-50-BUN-K9.Normally, this firewall support up to 50 users connected with VPN, and it support 3DES/AES.But, when i check this features using show version command, i get:ciscoasa# show ve...

I am trying to use the ASAv on AWS and have followed the documentation on how to build the configuration for the EC2 instances.   I have 2 additional interfaces.  I have added EIPs on the outside and mgmt interfaces I have created the day zero config...

Hello, we have ordered  L-ASA5585-60-TAM 3Y 4pcs and I've received an authorization key qty 4pcs and I'm not sure it will start when we have ordered or after activating  Thx for your support Amirkia

Hi everybody, I wanted to ask if it's safe to upgrade an ASA Active/Standby cluster running 8.6(1) image, to the new 9.4(4) version. Following the upgrade page indications (https://www.cisco.com/c/en/us/td/docs/security/asa/migration/upgrade/upgrade....

Some ISP's may block (seen in Bangladesh and China) ESP. Or you might suspect that the ISP limits the BW for ESP. But you dont see the same for AnyConnect clients or vpn tunnels using NAT-Traversal. Normally NAT-T is auto negotiated, and this is in g...

Hi All, Due to high memory utilisation, Cisco TAC have advised that I execute the following command; "object-group search access-control" I'm keen to understand the impact of the command, and determine the actual changes being made in executing the c...

Hi to all.In my Cisco ASA 5550, I need to set two different syslogs servers, and I need to send the system logs to the first one (only admins login/logout), and the traffic logs and all the rest (informational level) to the second one. Do you know if...

I was wondering if anyone has a baseline syslog message configuration. I know how to setup syslog and understand the logging levels, but I am looking to capture mostly warnings with some informational messages being elevated to warning status (exampl...

Hi all, I am trying to test this card i 6509-E chassis but every time when i am testing it is showing me No Power or unknown card it is not going online, i have tried in slot-1,2,3,4, 7,8,9, but no positive outcome can any one help me with this one p...