Network Security

Hey folks. I could use a hand.  I'm trying to setup a VPN tunnel for monitoring from a remote partner.  I'm getting the Tunnel established, but I'm having a conceptual problem.  I have internal LAN addresses that will be monitored from the remote par...

Hi all, I am trying to migrate our PIX firewall to ASA.  I am very new to the firewall domain since my skills are mainly for routing and switching... I have attached the topology and the configs of the PIX and configs of the ASA when converted.  Th...

Hello All. This may be a re post, but is there any reason someone may add this many images to the bootvar?  Would it be due to the way different version(s) of the ASA IOS interpret NATing? or even access lists? I can see having one extra in the stri...

Guys We have a Rockwell FactoryTalk SCADA system that uses DCOM as a communication protocol to talk to clients. The problem now is that DCOM requires port 1024-65535 to be opened on the firewall? (unless I have been told the wrong information?) Is t...

Hi, just wondering if anyone can help before I raise a TAC I have just updated Firepower Management Center to 6.0.0.1 and now trying to install Fingerprint (4.5.0-261), Geo DB (2016-02-24-001) and Rules (2016-03-030002) updates and I get an error co...

Hello! We are beginning our deployment of Cisco ISE and not sure how to proceed on our domain for ISE.  Should we use *.ise.company.com or just *.company.com?  We understand the security advantages of using ise.company.com, but it is worth any issue...

I have been piloting a Cisco Meraki MX64 device for quite sometime and we have been looking at it specifically to see what data can get out of it for SIEM integration. Per the documentation that I've found and working with Cisco  we should be able to...

Hi Guys, I have Firepower 8350 device with Ten Gi Sensor module (s1p1,s1p2 , s2p1,s2p2,s3,p3)  , but default s1p1 is enable , i'm trying to enable to other sensor interface , Didn't find the option to enable it - Firepower 8350 is managed by Firesi...

Hi all, I'm trying to configure an IPsec connection which excludes some traffic from being encripted using its dscp value. Apparently it's as easy as configuring its dscp value with a deny statement on the crypto ACL , but it's not working. Sometime...

Anyone can confirm if HA for VPN Site-to Site is availble? I tried to configure in my lab, is not allowed to create a tunnel with 2 peers as with used to do in ASA, so i created another tunnel below but with different peer, it does not failover unle...

Getting ready to set up a new ASA 5512-X Security Appliance with FirePOWER Services and wondering if ASDM 9 will run on a Win 10 laptop or should I go with ASDM 7.6 ?

Dears HI,  I would like to upgrade my old firewall ASA 5510 to be ASA 5512 and I have some problems after permitted access rules and routed and make NAT rules also the packet is dropped. and how i can make NAT exempt between two VALNs? THX Mugtaba ...