Network Security

Hello I have ASA5512-FW , ASA Version 8.6(1)2 I have 5 WAN IP addresses & I want to NAT my Internal Mail server with one of these IP address ex. 111.*.*253, so below is the chunk configuration of my ASA. Problem : I have taken a Packet capture it wil...

Does anyone know if there is a way to reset the external authentication configuration on FMC through CLI?  the reason I ask it is that I tried to Enable Client Certificates (for CAC authentication) on the box and since then FMC failed user authentica...

I have two ISP outbound circuits connected to a 5520  ASA version 8.4(7).   I can't figure out how to create a route based on source ip rather than destination IP.   In a nutshell, I want to route WIFI and web conferencing via one interface and web s...

good morning, i'm purchasing an ASA5506X plus AsaFirePOWER license, but i didn't have found a paper or sheet explaing which is the starting date of AsaFirePOWER license. i have this doubt so i need to know if license starting is since purchase date (...

Hello all, I am planning to upgrade an ISE distributed deployment from release 1.4 to 2.1 and I have few doubts I'd like to dispel with you. Here is the architecture :  - 1 PAN  - 2 PSNs  - 2 MNTs According to the upgrade procedure, distributed deplo...

 Hello all! I've successfully configured VXLAN support on ASA according official guide (http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/interface-vxlan.pdf)  I have VXLAN-VXLAN routing and VXLAN...

Running recent matched pair of ASA/ASDM on ASA5512-X.  I can launch ASDM fine from patched windows 7 machine.  When I try on patched windows 2012 R2 server I get login box back with red "cookies must be enabled to login" message.  Has anyone see this...

Has anyone discussed the options with the 5512/5515 models going end of life and whether or not they would consider the newer 2100 models versus the 5516/5525 models? I had a few questions and was wondering if anyone has dealt with the new models com...

Hello, I have Cisco ASA 5515-X devices with Firepower services managed by FMC 6.1.0.2 and TAC (IPS and URL) licenses.  I have few questions about it:  -  Is it possible to allow  specific YouTube channel for a specific group of users, but block all o...

Dear Team, In our company we have site to site VPN,One site we are using ASA 5505 and the other side is ASA 5510.WE are not able to access the remote side host from either side.The VPN tunnel will up only the hosts from two sides continuously pings o...

Hello,Are there any command on cisco ASA with latest software version 8.4.1 which is similar to snmp-server ifindex persist command on cisco routers/switches? I'm using cacti to collect interface traffic statistics on all DMZes (~50) and each time wh...

There are three networks in this setup: (A) containing a client host (B) containing the DNS server (not NATted wrt network A) (C) containing the DMZ host (NATted wrt network B) The traffic from Network A to Network B goes through the same router as t...

Qualys reported a finding "TCP Source Port Pass Firewall" on 25 port against cisco asa firewall.Could you explain why this behavior implemented in ASA. Is this a false positive? Vulnerability:TCP Source Port Pass Firewall THREAT:Your firewall policy ...

Dear All, I have an issue with event logs. model defense center 4000 version 5.4.1(59) When I brows    analysiis--connection --events---not showing more than a day In the same way If I tried to see the events with in 2 hours,doesn't show anything I c...