Network Security

Is there an order in which you need perform cert importing when you are trying to complete the identity and CA cert? When i create and import the identity cert with trustpoint0 and then try importing the CA cert with the same trustpoint0 it removed t...

I'm having problem loading an image for the ASA 5506-X using rommon As per instructions I have done the following: rommon #1> interface gigabitethernet0/0 rommon #2> address 10.86.118.4 rommon #3> server 10.86.118.21 rommon #4> gateway 10.86.118.21...

Hi All,I currently have my ASA's setup for logging buffered critical level log messages, but I want to also know when my ASA's port interfaces go down or come up, which to my knowledge, are warning level messages (411001, 411002, 411003).  Is there a...

Hi Having a problem where I cannot get icmp working from internal to external addresses that are hosted in my DMZ ( see atatched diagram )   Essentially my nat rules look right as the system actually works to a point . However if I allow a rule on t...

I started upgrading my ASA from firmware 8.6 and I forgot what version of the ASDM was. I went in incremental updates, but now I am stuck and it will not go any further than ASA Version 9.0(2) and ASDM 7.4(1). When I try to upgrade via the wizard, i...

Hello all, Can a Cisco 5512-X handle this scenerio? Physical Port 1 - ISP 1 (primary MPLS for VOIP) Physical Port 2 - ISP 2 (primary for Internet, data and vpn connections) Physical Port 3 - ISP 3 (backup connection for internet, data and vpn conne...

Hello, I would like to know whether Firepower Threat Defense (FTD) 6.0.1 supports dual WAN links fail-over ? or WAN links load balancing feature ? Seems I can't find any guidelines to configure it. Thanks, Roy

Hi ALL, I have setup a site-to-site VPN between HQ and branch. I am able to ping those segment behind Cisco ASA 5506-X (branch) from segment behind SonicWALL (HQ). But cannot ping inside interface (192.168.101.2) in Cisco ASA. Need your advise. bran...

Hi  I have Cisco ASA 5512 with version 9.4.2 running and I am integrating it with the MS Active Directory. I have created the firewall for AD agent and configured aaa-server for ldap also. The ASA is communicating with AD agent with success but once ...

In a previous post i was able to figure out why firesight was not mapping users to hosts correctly.  now i have a different problem.  my mobile users who have email access reside on my internal wifi network.  the DHCP pool is the same for our shop co...

The FirePower configuration button is not visible in ASDM.  login ASDM, use the setup wizard, configure the firepower address: 10.55.5.201/255.255.0.0/10.55.5.241 laptop connect to switch, configure the IP address: 10.55.5.202,  ping 10.55.5.201 is o...

We are getting the below error message from the ASA in our syslog server, A"SA-1-713900 construct_qm_hash() : Unknown hash algorithm" Is it just a Alert ?, how to identify which tunnel it is getting affected because of the above error message, Tha...

The topology (see the jpeg attached) is as follows: [HOST](192.168.2.2)------(192.168.2.1)[ASA 5505](192.168.1.100)------(192.168.1.1)[ROUTER]-------[INTERNET] The host cannot go to internet, instead ASA can go.  Host can ping ASA gateway (192.168....