Network Security

Have a client who only had provision for single IP address on the outside interface. Now they have had a another /29 subnet as they needs have increase. The current outside IP has 4 L2L VPN and 9 DNS entries , so instead of have to rekey all the chan...

I have a firewall DOD DISA STIG I need to apply. I have to set authentication timeout to 60 seconds. Is there a way to set authentication timeouts? So if a user tries to SSH into the device and let it sit at the login screen for 60 seconds, reset/dr...

Currently I'm able to limit bandwidth for the whole subnet like this: I want to have a limit of 2Mb down 1Mb up for each client not the whole subnet. Yes I could create two access-lists and class maps for every single IP in the range, but I don't fee...

HiWe use security level 0 outside and 100 in inside. but when we use security level other interface (dmz) then 50 or 30 or 20. so my question is what is security difference 50 ,30, 20 ?.when i use 50 or 30 or 20 ??thanksBiplob

Hi allI got few questions would like to consult you all, it's about Sourcecfire FMC 01. Since version 6.x code, ASA now can do the SSL decryption on the box.But if the user using VPN client application (example strongVPN), is the SSL policies able to...

Hi I am installing Firesight MGMT server 6.1 on Exsi version 6.0. The installation is running but during the installation its stopping at a stage and is getting stuck. I am also attaching the snapshot for the error which I got while installing versi...

Hello, I have an ASA 5506-X with firepower service, i have license for IPS and URL Filtering but i see that rules are not up to date even if if have license till April 2019 do i need to purchase more license to do the update ? regards,

hi, I do use VPN service which encrypt my traffic when it goes to the internet, through my ISP, but my ISP can still be able to block some traffic, like I noticed video call voice of several applications are blocked, I have tested more than one VP...

I have a pair of ASA's on my network, Both ASA's have their own Static WAN IP's Internal Interface IP of ASA 1 is 10.7.0.1 (its a /24 subnet) Internal Interface IP of ASA 2 is 10.7.0.2 (same subnet) ASA 1 is running DHCP (scope is 10.7.0.40-100) and ...

Hi, I'm new to ASA and setup the inside and outside interface, but when i see the debug log, i keep getting the tear down dynamic udp translation from inside to outside. Could you let me know what i'm missing?  Dec 06 2016 20:48:14: %ASA-6-305012: ...

Hi, I met an issue on ISE for wireless802.1x authentication, I have 2 ISE 3945 for cluster(The configuration on 2 ISEs are the same), and set this 2 ISE on WLC. It works fine before Dec, from 1st Dec, I changed authentication server and accounting ...

Hi Team, We have a customer who wants to enable routed and transparent mode at the same time for FTD platform. The use case is that the firewall in NAT mode for Internal private IP network and use the firewall in transparent mode for our Internal Pu...