Network Security

I am getting an error when trying to format disk1 (external flash) of ASA 5520: rc-asa-01# format disk1: Format operation may take a while. Continue? [confirm] Format operation will destroy all data in "disk1:". Continue? [confirm] %Error formatting...

Hi All, I administer a hub and spoke network. Core ASA 5520 in data center, branch ASA 5505's in the field.  IPSec VPN tunnel as WAN between the two. I block ICMP on all branch ASA 5505's for outside_access_in unless the source of the ICMP is in my t...

Hello, I have a strange problem where the active FW in a HA pair (5585X-SSP40 ASA 9.4.2) is passing through traffic okay but SSH is not getting to the FW. The SSH config is setup to accept from any source (0.0.0.0/0) and this works to the secondary ...

Can anyone assist with getting a Cisco ASA 5505 device setup to allow access to the ADSM interface? I'm new at the firewall and ASA devices and would greatly appreciate your assistance.  The web browser says there is a problem with the web sites secu...

Hi, in relation to this thread (https://supportforums.cisco.com/discussion/13067906/recommendation-stable-asa-software-firepower-601), I would again ask for a current software version recommend for a Cisco ASA. Currently we are using 9.1(7)4 but the...

Hello Experts, I want to disable/block the command (show running-configuration)  for some specific users who are accessing my Cisco ASA.  Can anyone give me instruction how to do it , please.   I dont have ACS or any radius server,  i want to do it ...

Hi everyone. I am attempting to implement PAT + NAT exemption on our ASA on a setup similar to the one described here: http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/nat_overview.html#92034 The main dif...

Good day, I need to get a rack mountable server to support the management server for the Cisco ASA 5508-X FIREWPOWER devices and all the VM licenses for it.  A server that I have in mind is the following: http://shop.lenovo.com/us/en/systems/servers/...

Hi, How to send the connection event with "block" action only to Firesight management center, not all connection event? Best Regards, Jackson Ku

Hi folks ,  I am planning to make asa 5545-x cluster.So i have some question. Question is : 1.Which mode(spanned or invidivual) should i use ?2.What is your recommendation ? I implemeneted as A/S before. But there was high CPU usage issue cause of C...

My question is : can we still use the 5500 ASA-s even after the EOL and what are the risks, and what we would want to replace e.g 5505 and 5510 with ? anything build in with IPS like the next X generation? 

Defense Center VM is deployed on ESXI 5.5. 4 CPUs, 8GBs memory. After uploading the 5.4.1.6 patch tried to install and it fails while attempting to run the following script: script 450_prior_updates/100_run_prior_dates didn't run I looked in the sysl...

i have my rules setup in a standard way where certain categories are allowed like news and media e.g. cnn and others like web advertisement and CDN are blocked. the problem i have is because websites like cnn.com make calls to URLs in the blocked ca...