Network Security

Hi, I would need the CLI parameters to deploy the ASAv image in Azure, because the Marketplace template is locked to only be deployed in a new Resource Group. For a CSR 1000v, it is like this from the Developer Command Prompt for VS2015: azure vm cre...

Basic problem: FTP server working via SSL. Connecting to it, trying to download/upload files, but they are not identified by name in FMC.  SSL Decryption  and File Policy is in place (unless there is some tricky configuration to be done) - connection...

We've been managing 2 Cisco ASA based FirePower modules with the 2 device VM ordered with part number FS-VMW-2-SW-K9.   It's being suggested that I have to throw that away and order the FS-VMW-10-SW-K9 (manages up to 10 devices) because we need to ma...

Has anyone seen this message after deploying a new NAT on an ASA. PAT pool exhausted. Unable to create TCP connection from outside. portmap translation creation failed for tcp src outside

Hi, I am setting up a NAT firewall. Could you help me understand why the below: Asymmetric NAT rules matched for forward and reverse flows; Connection for udp src outside-AeC-EBT:10.230.127.35/55812 dst inside-AeC-EST:192.168.224.15/162 denied due ...

Software Version 9.1(7)4 <context> ASA5585-SSP-10 We have an ASA in context mode and I have not worked with this setup before. I am just wondering what changes are made in system context and what changes are made in each individual context. For exam...

Hi, i've a new ASA 5506 9.5.2. On this asa i've configure one interface (phisical) as called LAN1. 192.168.40.1/24. Behind this interface there's  a web server called POOL with 192.168.40.2 DFT GTW 192.168.40.1. There's another host in this network c...

Hello, i am new to SFR. I need to change the config on the module after i configured it initialy. How do you Redo the sfr  setup.  it is a 5585x module. Thank you

Hi, I have a short question. I am using two cisco ASA in A/S failover. I am planning to move them to A/A configuration. The problem is I am very far from this devices and I have no console connection to them (only SSH). Will i lose connectivity duri...

Hi I got got two new ASA 5508-X. The software version is 9.5.1 and ASDM is 7.5.1. Previously on my ASA 5505's I was allowed to add addresses like 10.100.0.0 /16 in any of my configurations, now the new ASA's are telling me I cant use that, but I want...

After successfully adding LDAP on my ASA Firepower, i have tried blocking/allowing a web site to a particular user. Unfortunately the condition is not working. If i use an IP address instead then the site is successfully allowed/blocked.   I am using...