Network Security

Hi,Firepower 8000 series sensor deployed inline mode and i want capture spesific ip address from sensor, i got answer from support they say it is not possible.for example ip address: 1.1.1.1src: 1.1.1.1 dst any and connection logging enabled.traffic ...

I am trying to reimage an 8350 appliance.  I have been following the guide located here: http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118308-technote-firesight-00.html.  I can get to the point where the ISO downloads...

Wouldnt this ACL bring down the network? Since internal-out ACL has deny any any at the end implicitly, this will allow only icmp going out? ciscoasa#config t ciscoasa(config)#access-list internal-out permit icmp any any echo-reply ciscoasa(config)#a...

Is there any design guidance for building an Active/Active firewall layer for a WAN edge that spans two sites? As I see it I can have a single ASA per site in A/A access the two sites, or a cluster. What are the pros/cons and dependencies for these?

I am getting the error: System processes are starting, please wait when I log into the management IP address. I cannot log in to the gui.

Hi guys - we have a client that purchased a 5512-x years ago.  They have let smartnet expire and now their device will not boot.  I'm not sure if it's hardware related or not but it will not load the image.  I'm trying to reload a new default image o...

Hello, I have an issue with a Connection am trying to set up i have an application that is connecting to a remote server via Telnet but (UNIX server) but every time a Syn /Ack is established it cuts the connection and resets the TCP connection. On th...

Demo discussion

Hello, I want to enable syslog logging on my ASA,  the syslog server is connected into my ASA mgmt-int.   I tried a lot, the asa is not sending any logs into the syslog-server.        Can you see my config and comment, where the issue could be ? is t...

Hello,I got some questions from customer about FMC signature update(local malware analysis and file preclassification signature updates) . What I could find in document about this signature update is that, by default, automatic update is enable and F...

Hi, If we upgrade the ASA 8.2(5) to ASA 8.4(5), will the policy PAT gets auto converted or do we need to do manually after upgradition. Also what is the config that will not be auto converted after upgraded to ASA8.4(5) from ASA 8.2(5) Config: ===== ...

we need to be able to traceroute to the internet through the asa, but when the traffic hits the asa i then get requst time out.i can ping but not traceroute, is there an easy fix?