Network Security

Hi, I have ASA 5506-X with FirePower service.  I have Base K9 License.  I want to use :  Site to Site VPN upto 5 tunnes.   VPN Client upto 5  Dual ISP, WAN Failover do I need to upgrade to SEC License for above. Regards, Prem Vishwakarma 

Hello, Could anyone tell me if it is expected behavior of Cisco ASA5515-X Firepower (v6.0.1): I have passive authentication configured with active authentication as a fallback method. Is it ok when a passively authenticated user  logs off and then a ...

Hi, How to find the difference between previous version and latest version of Sourcefire Vulnerability And Fingerprint Database Updates. Thanks,

Hello! I am currently attempting to setup a Citrix Netscaler in our environment. I have encountered a roadblock though. We currently have 1 DMZ where the Netscaler is sitting. When attempting to setup LDAP authentication to our domain controller on o...

OSPF issues in one of our Firewalls where the neighbor status shifts from LOADING TO FULL. What is the common cause?

I want to allow only a few ranges of outside IP addresses to RDP into a single server on the inside.  It seem to me I need a bunch of Nat statements.  I have tried to make an access list describing the IP address ranges and then using IP NAT OUTSIDE ...

Good day.  I am attempting to upgrade a Cisco IPS (SSM-20) to 7.1.11 from 7.0.2 and the job fails due to lack of disk space; see below for error message. I tried to remove files from the CLI with the clear command (DB, events, etc), I've also gone in...

Is there a way to translate incoming traffic from the outside to show as the address of my "inside" interface on an ASA running 8.2?

The following hosts need to be included in an ASA ACL running IOS 9.5.   Can I summarized these hosts into several network statements as shown below?  Hosts to be included in the ACL: 10.1.6.101 10.1.6.10410.1.6.10510.1.6.10610.1.6.10710.1.6.10810.1....

I have a FirePOWER deployed where I'm using URL Filter. As an example I blocked "Search Engine".  For the machines inside the network google.com (over https) and bing.com (over http) are both blocked. For anyconnect users, connected from remote locat...

Is there a way to have a message when user is attempting to go to a blocked site rather than just not being able to get to the site?

Hi Our ASA SFR Module is logging the following event. I am wondering why packet with that destination are able to reach the device in the first place. The destination IP is not one of our own. Routing Problem of our ISP? Crafted Packets on direcly at...

The site that I support needs to implement WCCP to redirect all 80 and 443 traffic to a BlueCoat ProxySG. We have implemented the following configuration, and it is functional on 443, but is not redirecting any 80 traffic. A capture is also included....

Hello, everyone. Need some assistance with WCCP HTTPS redirection. I've applied the configurations, but it seems the ASA isn't redirecting any HTTPS traffic. I've confirmed with the web-filter support personnel that the traffic never arrives at the a...