Network Security

Had this problem today with ASA 5516-X on ASA v9.5.2-14.  Essentially the firewall stopped forwarding all between connected interfaces/subnets.  From the firewall console, I could ping pretty much anything in the network and on the internet.  But fro...

How do I use IP ranges in ASA firepower ASDM ? Individual addresses work like 192.168.1.100/32Full subnets also work like 192.168.1.0/24 But I cannot seem to find a way to use IP ranges in network --> individual objects.I tried something like 192.168...

Does anyone have any examples of custom network analysis rules (advanced section of Access control policy). I have tuned the NA policy based on reassembly and fragmentation but I am trying to imagine a scenario where you would need a custom na rule. ...

Hello All, Is there an easy way to update the network objects in FMC other than manually creating/updating each one by one? We have hundreds of network objects that we would like to import from Infoblox but I cannot see an easy way to do it currently...

Hi all, my architecture is :  and my ASA config is:  interface GigabitEthernet0 nameif outside security-level 0 ip address 192.168.2.1 255.255.255.0!interface GigabitEthernet1 nameif inside security-level 100 ip address 10.30.60.1 255.255.255.0!int...

I have a ASA 5505 and I am trying to enable traffic from the Inside interface with traffic on the Wireless interface. Both interfaces have a security level of 100 and the same-security-traffic permit inter-interface has been used but I cannot ping fr...

hi i have 2 6509 core switches with each one having one fwsm installed and failover configured between them i plan to do the following upgrade: asdm:6.1(3)F >>> 6.2(3)F ios:4.0(5) >>> 4.1(15) i read that if it isnt a major upgarde i can upgrade them ...

It has been a few years since I added a second ASA to an active one that was not configured for failover. I forget the order to activate failover. I remember the first time doing this I goofed and the secondary unit, which had nothing but failover co...

All A Vendor ASA will connect to my Core device via port-channel.  They will need to access a few devices on my network which will be restricted with acl's by address and port. I have given Vendor a subnet (192.168.53.x) from my network to use for t...

I'm evaluating ASA5500-X with FirePower bundle with Eval licenses. I'm facing 2 issues with FSMC, 1, FSMC show 2 critical health errors for SFR & Sourcefire3D related to time synchronisation. - Module Time Sync is out. 2, Nothing is displayed in "Con...

Is there an available lookup for File Malware Disposition? I am integrating Sourcefire with Splunk and the dashboards produce unknowns for Malware with file actions. The dispositions I see are 1,4 and 3.