Network Security

I finally able solve a huge issue after three days after taking support of Cisco.  I had a server 1 (10.33.206.11) placed in one of the interface on ASA (FWSM-6509) and another server 2 (10.33.193.140) in the inside zone directly connected through sw...

Hi, I'm begginer with Cisco FirePower services. I have this kind of problem my FirePower stucked with targeting policy to devices. asa.jpg In a Device, Management I can see that the device color is green asa5.jpg So why the FirePower dont wont to p...

Hello All,I am trying to upload ASA in GNS3 , It booted first time, However it's showing following error and not booting up.Please help to resolve this issue as I am not able to complete my lab cause of same.Message #188 :INFO: Power-On Self-Test in ...

Is it possible to configure an ASA to be used for VPN only in one arm mode? We use to have a VPN 3000 concentrator that worked in one-arm mode.  It basically just provided VPN connectivity for users and NATed all their connections prior to be routed ...

Hello,   I have site to site tunnel between 2 ASAs. One ASA is behind the university and other is at our datacenter. University provides us the Internet services and they have the ASA which controls the incoming traffic. We used to have tunnel issues...

Hi, we have to move ISP and as such will gain a new block of 8 static ip's. We have 2x 5510 in standby/failover state and we know the time that the connection will drop and change. Obviously, we need to change the ip's on the ASA's so I was wondering...

Hi everyoneI am about to put in production two ASA firewall in an active/standby mode to my network. I'm asking myself about the failover polltime and timeout in relation with the STP convergence time. I don't want the standby firewall to get active ...

Hi All, After upgrading from CSM 4.7 to 4.10, IPS updates and images downloads have started failing. It looks like it might be related to certifcates similar to bug CSCue16970 (the workaround for which I've already applied). In this case, I've appl...

I'm having trouble opening a passive FTP connection between two hosts, both of which are behind firewalls and NAT'd. The FTP inspection on my end is properly inspecting the FTP traffic and is therefore seeing the "REAL" IP address as a result of the ...

Hi, I have two ASAs in active/passive failover mode behind a pair of two ASR1001 edge router. Therefore both ASAs need a link to both routers and in case of failover the IP moves to the standby box. So to establish OSPF neighborship it needs on both ...