Network Security

Hello, I am using 2 ASA, standby and active.  They hook up to one switch.  Each ASA has a port connected to a port on the switch for failover purposes. These 2 ports on the switch has a separate/independent Vlan. The management port on each ASA is ...

ASA 5505 with 9.2(4) I am unable to get past the service object-group in an ACE. (the object group contains only 1 element now, but may be expanded, hence a "group of 1"). Notice below that the inline help doesn't offer anything other than <cr> afte...

hi all, how can i make interface vlan2 (GigabitEthernet0/1.1) to communicate with interface tcvpn (GigabitEthernet0/4.1) and interface vlan3 (GigabitEthernet0/1.2) to communicate with interface cacvpn (GigabitEthernet0/4.2)? when i put "route tcvpn 1...

Hi, I have an old ASA 5505 is I want to change it with a cisco asa 5506.I can not configure NAT.Can someone help me.Enclosed is the current configuration ASA 5505. Thanks a lot Pasquale

Hi everyone, I'm using ACLs on a Cisco ASA 5512 to block Internet access to some hosts on my network during working hours and only allowing it during breaks. The problem is that after the break, users still can browse facebook and stream radio stati...

We have a customer experiencing brute force attempts to their RDP servers form randomizing source IPs.  The have ASA with FP IPS in place.  Looking for options to block this.  I've suggested restricting access to the RDP farm to VPN, or moving the li...

Hello Cisco Community, I have a ASA 5506-x with a bunch of vlans (sub-interfaces) is there anyway to disable the security levels and purely use ACL's?

Hi everyone, We are planning to buy additional control license to block application like Psiphon3.exe. Is it already possible to block that given application? I already read some thread that although there is category under vpn/proxy and the psiphon...

Hi Team, We have been asked to confirm if we can achieve the below using firepower solution (NGIPS or NGFW): Blocking of Whatsapp client on the end user machine Blocking of file uploads but allowing downloads from the drop box based sites on inter...

Hi Team, Is it possible for the NGIPS to understand the presence of application on end user system and then take decision of blocking the network communication of the same like for example the AV is not present then block the communication of that d...

Question on FireSIGHT / FirePOWER TA subscription license. Sensors come with perpetual Protect and Control licenses but require TA subscription for system updates.  What is the extent of updates covered by TA license? Is it signatures only? Will Smar...

Hi all, i wanna configure my asa to get access to 2 VPN link the first via gateway 10.240.20.1 and the second via 10.240.30.1 but the ISP router use the intervlan routing in both interfaces i have just 10.240.20.1 but i can ping 10.240.30.1 via 10.24...

Hi All, Does anyone know of a command to clear the maximum conn counter on a Pix 501.  Have had a look around the internet but can't seem to find a command that clears it? Really don't want to have to do a reboot! Thanks Shaun