Network Security

Hi All, I administer a hub and spoke network. Core ASA 5520 in data center, branch ASA 5505's in the field.  IPSec VPN tunnel as WAN between the two. I block ICMP on all branch ASA 5505's for outside_access_in unless the source of the ICMP is in my t...

Hello, I have a strange problem where the active FW in a HA pair (5585X-SSP40 ASA 9.4.2) is passing through traffic okay but SSH is not getting to the FW. The SSH config is setup to accept from any source (0.0.0.0/0) and this works to the secondary s...

Can anyone assist with getting a Cisco ASA 5505 device setup to allow access to the ADSM interface? I'm new at the firewall and ASA devices and would greatly appreciate your assistance.  The web browser says there is a problem with the web sites secu...

Hi, in relation to this thread (https://supportforums.cisco.com/discussion/13067906/recommendation-stable-asa-software-firepower-601), I would again ask for a current software version recommend for a Cisco ASA. Currently we are using 9.1(7)4 but ther...

Hello Experts, I want to disable/block the command (show running-configuration)  for some specific users who are accessing my Cisco ASA.  Can anyone give me instruction how to do it , please.   I dont have ACS or any radius server,  i want to do it l...

Hi everyone. I am attempting to implement PAT + NAT exemption on our ASA on a setup similar to the one described here: http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/nat_overview.html#92034 The main diff...

Good day, I need to get a rack mountable server to support the management server for the Cisco ASA 5508-X FIREWPOWER devices and all the VM licenses for it.  A server that I have in mind is the following: http://shop.lenovo.com/us/en/systems/servers/...

Hi, How to send the connection event with "block" action only to Firesight management center, not all connection event? Best Regards, Jackson Ku

Hi folks ,  I am planning to make asa 5545-x cluster.So i have some question. Question is : 1.Which mode(spanned or invidivual) should i use ?2.What is your recommendation ? I implemeneted as A/S before. But there was high CPU usage issue cause of Co...

My question is : can we still use the 5500 ASA-s even after the EOL and what are the risks, and what we would want to replace e.g 5505 and 5510 with ? anything build in with IPS like the next X generation? 

Defense Center VM is deployed on ESXI 5.5. 4 CPUs, 8GBs memory. After uploading the 5.4.1.6 patch tried to install and it fails while attempting to run the following script: script 450_prior_updates/100_run_prior_dates didn't run I looked in the sysl...

i have my rules setup in a standard way where certain categories are allowed like news and media e.g. cnn and others like web advertisement and CDN are blocked. the problem i have is because websites like cnn.com make calls to URLs in the blocked cat...

Hi folks! After a few interactions with FirePOWER, Cisco TAC, Cisco LIve!  Lunch and Learn, and "The Hub" -  I find myself feeling like still searching for good documentation for a few "Best practices" that would apply to many scenarios. When I have ...