Is it possible to implement time based URL Filtering.I have a client who wants to disable Social Networking but only open it up during lunch time. ThksTerry
Hi,
What is the differences between enabling dns-guard globally or creating class-map inspection
firewall# configure terminal firewall(config)# dns-guard firewall(config)# exit firewall#
class-map inspection_default match default-inspection-traf...
Hi guys,
I'm trying to use ASDM on ASA version 9.5(1) where I need to set up a site to site VPN with my local inside server to be NAT-ed to a different address in order to mitigate IP address Overlapping.I've seen a few examples using CLI, but I'm wo...
Hi all,
I will be installing 2 new sensors tomorrow for a client.
However, i would like to be able to prove in a quick way that traffic is being looked at and would like to be able to show how much traffic that a sensor has processed.
The sensor is a...
Hello,
I would like to understand the configuration of Inline Tap Mode in ASA with FirePOWER.
To operate in this mode, I need to configure the ASA policy-map to monitor-only or can keep inline and create an Intrusion-Policy on FMC with Drop When Inl...
Hi everyone, I'm here as a last resort because I don't know how else to get this resolved. 3 days ago, I created a basic File Policy in Firesight. I shortly went back to it to rename it, erased the red title text for my policy and started to modif...
Hello.
I have configure ASA Failover.
failoverfailover lan unit secondaryfailover lan interface FAILOVER Port-channel2failover link FAILOVER Port-channel2failover interface ip FAILOVER 172.16.31.249 255.255.255.248 standby 172.16.31.250
!
interface G...
Hi, I've been tinkering with this issue for almost 1 month or two but still unsuccessful. This is actually my second post about our Cisco ASA 5520. In my Access Rules, I set it up as ip for the service to ensure ICMP is included but I can only ping l...
Hi Everyone,
If traffic flow is from
Source Interface is DMZ to Destination interface is inside we create ACL to allow the traffic.
Source IP 192.168.50.x
Destination IP is 10.50.50.x
But i saw at our clients ASA that i need below NAT to make it wo...
I have a pair of ASA5525Xs setup as HA redundant pair and I would like to deploy FirePOWER AMP, IPS and URL filtering licenses to these devices. My question is; do I need FirePOWER licenses for each device. Or, since the devices are setup in HA con...
Hello friends :)
My company has got ASA 5510 without CF. I inserted a few CF but without any success.I tried to use CF from my ASA 5505, too. I tried to use format, and fsck, but everything was the same. Can I use the same image from ASA 5505 on AS...
Hello Community
I have an interesting case and after reading this articles and some others, I'm not sure how to fix it.... For some reason for some IPs behind our firewall the trace route show multiple times the IP of the outside interface and I dont...
Hi Guys,
Today I encountered a strange problem with our WAN firewall (ASA 5520). The clients from outside were not able to connect to the services inside. Even from the WAN router I was not able to ping the services inside for about 40 minutes. The...
