Network Security

Hello, Why does this NAT not work, I want to briefly allow a remote desktop to be opened up over the internet via our ASA to an internal IP off the inside interface: object network 172.29.140.37 nat (inside,outside) static x.x.x.x outside_access_in e...

Hello.I have an ASA 5515 version 9.5 with public IP address on outside interface. Also I have server S1 with public address IP1, servers S2 and S3 (public addresses IP2 and IP3). I want all traffic coming from IP1 to the outside interface on ASA redi...

Hi all, I've been asked a question about a customer who uses AnyConnect for access to a secure network from related networks in their organization, some of which use TLS-decrypting proxy servers. I realized that there are a number of possible scenari...

I have mentioned the ASA firewall config .. I want configure SSH only for the below interface..  interface Port-channel10 lacp max-bundle 8 nameif ASA-OUT security-level 0 ip address 10.246.17.145 255.255.255.248 standby 10.246.17.146 Please do the n...

Hello, I am using CISCO ASA 5585. While most of the users could browse one particular website few cannot. I captured the packets against the solution provided for "MSS Exceeded" but didn't find any packets captured against the match. So, the problem ...

Hello, I have two pools DHCP pools configured on the ASA Firewall, the clints on two different WLAN Networks are getting the IP addresses from the same pool sometimes they get it from the right pool sometimes from the other pool, on the WLAN controll...

Hello Guys, I have a pair of Cisco ASA 5585 (Active-Standby). Can any one confirm the following: 1. Does the secondary ASA generate SNMP traps so that the same can be monitored in NMS? 2. Is this possible to get hardware information like Chassis temp...

I have IPSec VPN tunnel on ASA 5555-X between two sites. A few application disconnect automatically after working normally for 1 minute. These applications work fine for users accessing locally. The ASA code is 9.4.4

Hello! I have to Cisco ASA 5515 in Active/Standby mode. Can in install Firepower module only in Active ASA? Can i move SFR from Active to Standby if Active fails? Thx in advance!

Hi, I am trying run "more system:running-config" but it's not taking on Cisco 4140 firewall version 9.6. We are running on multi context on this ASA and i am try to see VPN pre shared key on one of the context. Please any one help me is this command ...

Hey, I'm trying to make outbound SSL decryption work but have been facing many issues. When I apply an SSL inspection policy I'm having really weird results (see issue below). Right now I only have one rule in my SSL policy : decrypt everything from ...

Hi,  Hoping to avoid a reboot or services restart. Does anyone know if you still need to reboot/restart firepower once a custom Application detector is applied? Using version 6.0.1.2