Network Security

Hi allHow to achieve the goal of update the ASA version, in the setup of HA without an interrupt (example: upgrading one unit while another unit for production, once finish upgrade then switch role to upgrade the second unit, with no need a simultane...

I'm doing a proof of concept using Cisco's IOS CA Server to do our DMVPN authentication. When I use a stand alone CA Server this stuff works great but that doesn't have any "redundancy" in it were we to have a failure. So we want to use the subordina...

Hi All, First BEFORE any of you toss the hairpin examples at me - I've read all of them and they didn't help.  They mainly concern hairpins between static gateway2gateway VPN's coming into an ASA.   Here is my setup: Main ASA #1 that is setup to all...

Working on switching our ASA from AAA authentication to Certificate based authentication, which I do have working. My one question is we have multiple profiles how do I map a certificate to a certain profile for anyconnect? Would the below article be...

Is there an order in which you need perform cert importing when you are trying to complete the identity and CA cert? When i create and import the identity cert with trustpoint0 and then try importing the CA cert with the same trustpoint0 it removed t...

I'm having problem loading an image for the ASA 5506-X using rommon As per instructions I have done the following: rommon #1> interface gigabitethernet0/0 rommon #2> address 10.86.118.4 rommon #3> server 10.86.118.21 rommon #4> gateway 10.86.118.21...

Hi All,I currently have my ASA's setup for logging buffered critical level log messages, but I want to also know when my ASA's port interfaces go down or come up, which to my knowledge, are warning level messages (411001, 411002, 411003).  Is there a...

Hi Having a problem where I cannot get icmp working from internal to external addresses that are hosted in my DMZ ( see atatched diagram )   Essentially my nat rules look right as the system actually works to a point . However if I allow a rule on t...

I started upgrading my ASA from firmware 8.6 and I forgot what version of the ASDM was. I went in incremental updates, but now I am stuck and it will not go any further than ASA Version 9.0(2) and ASDM 7.4(1). When I try to upgrade via the wizard, i...

Hello all, Can a Cisco 5512-X handle this scenerio? Physical Port 1 - ISP 1 (primary MPLS for VOIP) Physical Port 2 - ISP 2 (primary for Internet, data and vpn connections) Physical Port 3 - ISP 3 (backup connection for internet, data and vpn conne...

Hello, I would like to know whether Firepower Threat Defense (FTD) 6.0.1 supports dual WAN links fail-over ? or WAN links load balancing feature ? Seems I can't find any guidelines to configure it. Thanks, Roy

Hi ALL, I have setup a site-to-site VPN between HQ and branch. I am able to ping those segment behind Cisco ASA 5506-X (branch) from segment behind SonicWALL (HQ). But cannot ping inside interface (192.168.101.2) in Cisco ASA. Need your advise. bran...