Network Security

The following hosts need to be included in an ASA ACL running IOS 9.5.   Can I summarized these hosts into several network statements as shown below?  Hosts to be included in the ACL: 10.1.6.101 10.1.6.10410.1.6.10510.1.6.10610.1.6.10710.1.6.10810.1....

I have a FirePOWER deployed where I'm using URL Filter. As an example I blocked "Search Engine".  For the machines inside the network google.com (over https) and bing.com (over http) are both blocked. For anyconnect users, connected from remote locat...

Is there a way to have a message when user is attempting to go to a blocked site rather than just not being able to get to the site?

Hi Our ASA SFR Module is logging the following event. I am wondering why packet with that destination are able to reach the device in the first place. The destination IP is not one of our own. Routing Problem of our ISP? Crafted Packets on direcly at...

The site that I support needs to implement WCCP to redirect all 80 and 443 traffic to a BlueCoat ProxySG. We have implemented the following configuration, and it is functional on 443, but is not redirecting any 80 traffic. A capture is also included....

Hello, everyone. Need some assistance with WCCP HTTPS redirection. I've applied the configurations, but it seems the ASA isn't redirecting any HTTPS traffic. I've confirmed with the web-filter support personnel that the traffic never arrives at the a...

Hello, I saw that they revised the security notice for the SNMP vulnerability and listed the fixed software. I saw that 9.6.1(11) fixes this vulnerability but I only see (10) listed in the software downloads. I also noticed that Cisco has 9.6(2) rele...

Hello Guys: I am trying to do a VPN + NAT on my ASA 5545x 9.6 device, this is my scenario: Interfaces:-outside-VLAN43 (my VPN pool) 10.43.0.0 / 255.255.248.0-VLAN200 (my DMZ VLAN) 10.20.2.0 / 255.255.255.0 Security-Level:-outside (0)-VLAN43 (10)-VLA...

Hi all, I have two asa 5525's that I am prepping for network integration but they are not connected to the network yet.. They are setup in HA. Problem is: one had 9.1(5) and the other has 9.1(6). As you can imagine they are yelling at me to get the f...

Hello community! According to firewall migration tool that cisco provides (https://fwm.cisco.com) I need to this the following change: ##### 8.2 code #####static (inside,outside) tcp 50.50.50.50 https 10.34.4.11 32030 netmask 255.255.255.255!access-...

Hello. I'm having some trouble building a proper NAT configuration. I have 3 interfaces, IP addresses are made up as i cant post the real ones for security purposes. Please see the image i attached. The purpose is that the .4 (from HOST subnet) i...

Hey guys, Can anyone help me with this? i am having trouble getting traffic to flow from our No-POS vlan to our POS vlan and vice versa. looking to allow all traffic types and all ports between the 2 vlans which are both internal vlans.I have attache...

Hello, I have deployed FireSight about 4 or 5 months and it's working as normal. But I got a problem on 7AM 12-Aug (ICT +7) that all traffic have been blocked when go through SFR module. When I removed the sfr configuration the traffic is working as ...