Network Security

Hi team, I have a failover Cisco ASA 5525x  with SFR module with ip configured working through ASA management 0/0 (is our Backup SFR) It is connected to an access switch port. It was working as expected and I was able to ping the IP until a week ago...

Dear Team, We are using FWSM (version 4.0.11) which is managed by Cisco Security Manager (CSM) (version 4.4). We are planning to upgrade the FWSM to version 4.0.17. I need to know after the FWSM upgrade, do we need to delete the existing FWSM (versi...

Hi All, Good Day!! I am using Cisco ASA 5505 in our office and i want to deny all sites and allow only few networks. Is it possible to do like this and by using policy map i cant block https traffic. if it possble to do please some send me configur...

Hello,are there any plans to implement SSL decryption/ interception in the new ASA series (e.g. 5506-X or 5512-X)? If yes is there a road map? Kind Regards  

Dear all, I lost site to site vpn connectivity to one of remote office server from my office network after configured a static nat for public access for this server. It seems static nat is preferred over nat0 (vpn) hence i cannot access server over ...

Hi all,  I need to reset a firewall (ASA 5505) located somewhere , I would like to implement a remote reset using SSH in order to clean the configuration and with all port in shutdown... in other way with only a physical access available (using CONSO...

Hi All,   I just updated the the SFR software on the ASA5506 to the latest version 6.0, but when I try to create an access control policy it shows the following error:   after you click ok, it just shows the access control policy page without any op...

I am trying to issue command "ssh key-exchange group dhgroup14" on several of my ASA firewalls.  The key-exchange command is failing on 3 of 4 ASA firewalls.  According to Cisco documentation, this command was introducted in 8.4.  My ASA's are runnin...

Hello, I have a question on routes on a cisco asa. I setup a firewall for internet for IT users. The firewall has a management interface that we use to manage it from specific jump servers. The issue is that the IT Users need to access the mgmt(jump...

Hello, I am a newbie to the Cisco ASA world. So I am finding it difficult to understand certain configuration especially the ones configured in older versions. Can you please help me to understand the meaning of these commands: global (outside) 13 in...

Hi Friends, We have Cisco 5525 ASA Firewall, which is on Remote location and working fine. my equerry is if firewall fails/ reset, how can I login and workout, can use some thing auxiliary port or any latest process is there to login firewall in suc...

Hi Team, I've tried this step to disable the ips sshv1. I would like to know how to revert back in "#Protocol 2,1" configuration. Here is the steps: 1) Assuming that you already have a service account created. Pls login via the service account.2) Lo...

Hi Folks, Should I allow both the TCP and UDP port 3389 in the Cisco ASA 5545 firewall in order to allow RDP for accessing our terminal server from external networks. Regards, Ajay Sundar.N

Hi All,  Greetings for the day !!!!! I am pursuing the security course and I want to work on the ASDM GUI, but I am unable to find one. Could anyone help me out in providing the Download link or the software so that I can proceed further without any ...

Gents, As we know that packets with invalid/unreachable destination address received by a Cisco device can be discarded and device can further  generate  an  'ip  unreachable'  message  to  notify  the  sender  about  the  unreachable  host.   This ...