Network Security

Hi all, I'm using ASA5585-X SSP40 (version 9.4.(2)6 ) with Firepower 6.0.1.2. Because of performance issues I've activated AAB for testing purposes. In the documentation I found: "If detection is bypassed, the device generates a health monitoring a...

Hi, I have a simple query around access control policy using applications in the rule. If we want to create access control policies with applications is it necessary for configuring the port/protocol information as well. Or can we just use applicatio...

Hello! I'm trying to perform an upgrade of the ASA 5555-X from version 9.0(3) to 9.1(2), 9.2(4)-5, 9.6(2)-3 and it's failing. The only version I was able to upgrade to is 9.0(4). According the "Upgrade to ASA 9.1, 9.2 and 9.6" guides, version 9.0(4...

Hi guys, I have a 5506-X. I am wondering if it can do per-ip shaping. For example if I create an object with the subnet 192.168.1.0/24. Can the ASA limit BW for each IP in the subnet to 1mbps? Thanks

Hello, I want to have advise of how to fine tune the Threat Detection.  Currently keep to find a ASA syslog Jan  8 11:33:43 192.168.10.2 %ASA-4-733100: [   111.222.333.444] drop rate-1 exceeded. Current burst rate is 23 per second, max configured ...

Hello All, We have Cisco ASA in production environment on which i see the connection count more than 300000 which is more than usual which we observe. Kindly let me know is this normal or is there any way to reduce it. Also if i clear the connection...

Hi there, I tried serveral things to get my firewall MANAGED through Cisco Anyconnect. I get connected, I can even ping my device when vpn connected but cannot manage it !!! Not with ssh, not with ASDM, not with telnet for example,  Anyone any advice...

Hello, I have implemented ASA 5516-x with inside, dmz, outside network. Inside can connect to dmz (both local hostname and public IP/hostname) outisde can connect to dmz (public IP/hostname) Any dmz server tries to connect to the Public Server (Pub...

Hi All, I have re-image my ASA 5515-x with SSD to FTD 6.1.0. Following are my objective.. 1) Access FTD locally through FDM 2) Point the FTD to FMC 6.1.0 Following are my observations 1) My ASA 5515-x which has FTD 6.1.0 image installed on it, is no...

Hello, Whats the difference between traditional Cisco ASA with firepower vs new Cisco Firepower threat defence.  why customer will go for Firepower threat defence, if they already have Cisco ASA with firepower services.  what are the benefits of FT...

Hi, I'm doing project of network in Packet Tracer, but I encountered a problem with connection between vlans and Internet. I have ASA5005, two layer 3 switches (3560, one for each building) and bunch of layer 2 switches (one for each floor of buildin...