Network Security

Hello community, Still trying to figure it out the new NAT and today I came up with this real-life scenario and now I have some doubts on how the NAT behaves. My configuration: object network LOCAL-wNAT  host 10.34.30.36 nat (inside,outside) static ...

Hi I am not sure what is happening here. Ok first my setup, i have Cisco ASA 5515X, ASA software version 9.5(1) ASDM software version 7.5(1)90. I have 2 new webservers on a dmz and i wish to forward incoming connections to them. The internal servers...

I am trying (unsuccessfully) to scp a file from a unix/linux device to an ASA 5505. The connection is authenticated on the 5505 but the copy fails as it keeps reporting an "SCP send error" (see below). SCP is new to me as I normally use sftp, but tha...

Hi -  this may be a dumb question.  Ssh to firepower, is there a CLI command to save and backup current configuration? In firesight dc750, i know i can use GUI to save and restore firesight config but couldn't find a way to save and backup config in ...

Hi guys,  We are using Sourcefire Firesight for the IDS purpose.  Someone has created few rules which are capturing the heavy traffic. I would like to know how to get the information about rule creator?  Appreciate your help. Thanks,  Regards, Jay 

Accidentally, I have to implement a DMZ configuration on an outdated and unmaintained ASA 5510 firewall (ASA version 8.0(3)6, ASDM version 6.0). After diving into the manual and some forum posts, I've learned that there was a major CLI syntax change ...

We currently have an ASA 5585-X with an SSP-40 as well as an IPS SSP-40.   There is currently no IPS functionality in use, the IPS SSP-40 was bought for a future project. Another administrator is under the impression that we can not use the 10G inter...

I am needing assistance with the command(s) needed to enable traffic from the outside interface using port 8181 to a device behind the firewall. The outside (public) interface is using ip address 66.76.160.79. The device that I need to access behind...

Hi We have a new WLC with ISE. We can see the laptop connecting to the WLC & ISE as well as on the firewall.  On the laptop (in cmd) I can see via ns lookup 8.8.8.8. However when I open a webpage on the laptop i get a 'unable to connect'. In the ...

Hello everyone, In my lab environment I have set up a cisco asa 5505 firewall for testing purposes. Got some things working, but I cannot get past the implicit deny rule: I make rules to permit http traffic between interfaces, but the firewall keeps...

1. With Modular Policy Framework, what is the meaning of the drop count?  See below output of a SFR policy. 2. Does it represent packets that were dropped by the ASA prior to being punted to SFR? 3. If the ASA is dropping those packet, what would be ...