Network Security

I am trying to block facebook website using fqdn, the problem I am facing is that it block all sites  Here is my configuration. Step 1 #dns domain-lookup outside #DNS server-group DefaultDNS #name-server 8.8.4.4 Step 2 #object network OBJ-FACEBOOK.CO...

Dears, I have one presales question, On what basis we should suggest a firewall model, in other words if I want to suggest a customer a ASA firewall model what inputs I have to ask customer so that it can be easier for me to decide that for his netwo...

Hello, We try to use our both dsl line at the same time using load charing with PBR on ASA firewall 9.5 PPPOE interface Config interface GigabitEthernet0/2 nameif outside security-level 0 pppoe client vpdn group ADSL1 ip address pppoe setroute!inte...

I need the best way to do Latency check ,Throughput test and packet loss test on Cisco ASA. please share the right way to do and the values which are considered good.

So I have a customer that gets hit a fair bit with intrusion attempts etc. They only require external terminal server connections for say country "x". I have created a firepower control policy which blocks (with reset) all traffic originating extern...

Hi All, We have just installed a new firewall 5506X running:- Cisco Adaptive Security Appliance Software Version 9.6(1)  Device Manager Version 7.6(1) And it has various routes to an MPLS:- S        140.85.0.0 255.255.0.0 [1/0] via 10.164.115.97, ...

Hi Guys, I am facing an issue with IPS, where the IPS is not doing an auto update with the cisco url provided below: https://72.163.4.161//cgi-bin/front.x/ida/locator/locator.pl The Auto Update was working fine before and it only started failing aro...

Hi, we've migrated to a new firewall and we would like to make our old firewall (Cisco ASA 5520) as a backup device for our network. We're planning to backup the config and restore into factory settings.  I saw a reset button at the back just like an...

I have an ASA 5516-x that I noticed a strange routing issue on. I am using RIP routing between the ASA and a 3750 stack which has a management and inside interface. When I powered on the asa I could not ping the inside interface but could ping the ma...

Hi Team, Does our firewall integrate with two different two factor authentication systems at the same time? Customer is using RSA as of now . Parallel they want to evaluate another 2FA . So for some time they want both these 2FA to work- few people ...

We need to have tools which will show us upcoming EOS/EOL dates of hardware (Model) and software (IOS) for cisco devices. Also, It should be able to tell IDS/IPS features (like Signature Updates ) expiration as well for particular IOS/IPS versions. P...

Hi; I have some questions about a Firesight license, i purchase tow ASA 5512 FirePower and ASA 5525 FirePower can i use this license FS-VMW-2-SW-K9 to manage those tow devices using this one license ? and my second question is about the expire date o...