Network Security

Hi All, First BEFORE any of you toss the hairpin examples at me - I've read all of them and they didn't help.  They mainly concern hairpins between static gateway2gateway VPN's coming into an ASA.   Here is my setup: Main ASA #1 that is setup to allo...

Working on switching our ASA from AAA authentication to Certificate based authentication, which I do have working. My one question is we have multiple profiles how do I map a certificate to a certain profile for anyconnect? Would the below article be...

Is there an order in which you need perform cert importing when you are trying to complete the identity and CA cert? When i create and import the identity cert with trustpoint0 and then try importing the CA cert with the same trustpoint0 it removed t...

I'm having problem loading an image for the ASA 5506-X using rommon As per instructions I have done the following: rommon #1> interface gigabitethernet0/0 rommon #2> address 10.86.118.4 rommon #3> server 10.86.118.21 rommon #4> gateway 10.86.118.21 r...

Hi All,I currently have my ASA's setup for logging buffered critical level log messages, but I want to also know when my ASA's port interfaces go down or come up, which to my knowledge, are warning level messages (411001, 411002, 411003).  Is there a...

Hi Having a problem where I cannot get icmp working from internal to external addresses that are hosted in my DMZ ( see atatched diagram )   Essentially my nat rules look right as the system actually works to a point . However if I allow a rule on th...

I started upgrading my ASA from firmware 8.6 and I forgot what version of the ASDM was. I went in incremental updates, but now I am stuck and it will not go any further than ASA Version 9.0(2) and ASDM 7.4(1). When I try to upgrade via the wizard, it...

Hello all, Can a Cisco 5512-X handle this scenerio? Physical Port 1 - ISP 1 (primary MPLS for VOIP) Physical Port 2 - ISP 2 (primary for Internet, data and vpn connections) Physical Port 3 - ISP 3 (backup connection for internet, data and vpn connect...

Hello, I would like to know whether Firepower Threat Defense (FTD) 6.0.1 supports dual WAN links fail-over ? or WAN links load balancing feature ? Seems I can't find any guidelines to configure it. Thanks, Roy

Hi ALL, I have setup a site-to-site VPN between HQ and branch. I am able to ping those segment behind Cisco ASA 5506-X (branch) from segment behind SonicWALL (HQ). But cannot ping inside interface (192.168.101.2) in Cisco ASA. Need your advise. branc...

Hi  I have Cisco ASA 5512 with version 9.4.2 running and I am integrating it with the MS Active Directory. I have created the firewall for AD agent and configured aaa-server for ldap also. The ASA is communicating with AD agent with success but once ...

In a previous post i was able to figure out why firesight was not mapping users to hosts correctly.  now i have a different problem.  my mobile users who have email access reside on my internal wifi network.  the DHCP pool is the same for our shop co...

The FirePower configuration button is not visible in ASDM.  login ASDM, use the setup wizard, configure the firepower address: 10.55.5.201/255.255.0.0/10.55.5.241 laptop connect to switch, configure the IP address: 10.55.5.202,  ping 10.55.5.201 is o...