Network Security

Hi,   We have brand new Cisco ASA 5525 + Firepower and from two days the CPU was 93-100% from process DATAPATH-0-1842. The version of the ASA software is 9.6(1) the ASDM Software is 7.6(1) and Firepower is 6.0.0. Can someone tell me way this process ...

I have a cisco ASA 5506-X and want to ping two host. One on the outside interface and one on the inside interface When i create an access list and appy to it the deny icmp action did not work. The running ping is still ok. When i stop the ping and re...

Does anyone know if I can retrieve the activation keys via an ASA serial numbers from cisco? Is there a web site tool for doing this? Thanks!

How can I monitor different users logged in to a single terminal server with different permissions?From what I know user agent 2.2 couldn't identify it, does anything change on 2.3?  Thanks

Hi allHow to achieve the goal of update the ASA version, in the setup of HA without an interrupt (example: upgrading one unit while another unit for production, once finish upgrade then switch role to upgrade the second unit, with no need a simultane...

I'm doing a proof of concept using Cisco's IOS CA Server to do our DMVPN authentication. When I use a stand alone CA Server this stuff works great but that doesn't have any "redundancy" in it were we to have a failure. So we want to use the subordina...

Hi All, First BEFORE any of you toss the hairpin examples at me - I've read all of them and they didn't help.  They mainly concern hairpins between static gateway2gateway VPN's coming into an ASA.   Here is my setup: Main ASA #1 that is setup to all...

Working on switching our ASA from AAA authentication to Certificate based authentication, which I do have working. My one question is we have multiple profiles how do I map a certificate to a certain profile for anyconnect? Would the below article be...

Is there an order in which you need perform cert importing when you are trying to complete the identity and CA cert? When i create and import the identity cert with trustpoint0 and then try importing the CA cert with the same trustpoint0 it removed t...

I'm having problem loading an image for the ASA 5506-X using rommon As per instructions I have done the following: rommon #1> interface gigabitethernet0/0 rommon #2> address 10.86.118.4 rommon #3> server 10.86.118.21 rommon #4> gateway 10.86.118.21...

Hi All,I currently have my ASA's setup for logging buffered critical level log messages, but I want to also know when my ASA's port interfaces go down or come up, which to my knowledge, are warning level messages (411001, 411002, 411003).  Is there a...

Hi Having a problem where I cannot get icmp working from internal to external addresses that are hosted in my DMZ ( see atatched diagram )   Essentially my nat rules look right as the system actually works to a point . However if I allow a rule on t...

I started upgrading my ASA from firmware 8.6 and I forgot what version of the ASDM was. I went in incremental updates, but now I am stuck and it will not go any further than ASA Version 9.0(2) and ASDM 7.4(1). When I try to upgrade via the wizard, i...