Network Security

Hi, I have the following  configuration , but it does not working , logging enableno snmp-server locationno snmp-server contact snmp-server host INSIDE 192.168.2.1 trap community passwordd snmp-server enable traps syslog logging history notifications...

Hi All I have a server on our internal network that has very limited access from the internet. Therefore it has an external address that is NAT'd at our firewall. However I want to arrange to access the server from our LAN also using its external add...

Hi, Currently I have a private line owned by SP and I setup a Backup line which is VPN tunnel. I'm using CIsco ASA 5512 on both sites I would like to ask the ff. 1.By default is Voip traffic permit or deny  by our firewall? 2. For Voice traffic do i ...

Hi,How to enable software bypass on clustered firepower 8350 devices.Sometime during troubleshooting we need to bypass IPS for test-traffic. How to achieve this without physical cabling changes/switch config changes.I  see Access Control rule with Tr...

Hi, Need to know the explanation of  NAT access-list policy extended permit ip host 192.168.60.207 host 192.203.187.140 nat (Outside) 1 access-list policy Above is zero nat zero that says if source is 192.168.60.207 and going to destination 192.203...

I ping a device with in the Firepower console, but cant escape from the reply sequence. Does anyone know the key combination to quit from the ping request? Thank you.

Hi I have some issue on Cisco ASA firewpoer licensing. Cisco tell us like that " The Cisco ASA with FirePOWER Services base configuration includes the AVC function by default. This feature provides application identification and control of more than...

I am trying to add ASA5508 to the firesight but failing. show netstat displays established session with DNS server. But with powersight, it is SYN_SENT My powersight is in the inside interface. show int ip br indicates the management 1/1 is in down/d...

Hello, I am testing a new ASA and I am having difficulties getting a machine that I have set up a static NAT for, getting out to the internet. It seems that I can get the traffic in. The test server is a test web server and from the outside I can rea...

Is there a way by which we can block all the connections from a country on Cisco ASA, without we manually defining a ACL. Hardware- Cisco ASA5510- Version - 9.0

Hi, I have got a question and run out of troubleshooting ideas. I have got 60Mb Fibre broadband coming in and connected to ASA 5505 Firewall and then our switches. When I test our speed without ASA 5505 Firewall I get more than 60mb. When I do run s...

How to Tshoot s-to-s VPN / Nat on 5510? SIte 1:Outside - 111.1.1.1/30Inside - 10.34.48.0/20 SIte 2:Outside - 222.1.1.1/30Inside - 10.34.16.0/20 For Site1:access-list no-nat-traffic extended permit ip 10.34.48.0 255.255.240.0 10.34.16.0 255.255.240.0a...

Hi All I'm using a Cisco ASA 5550 firewall. I have an external subnet on the internet eg 200.1.1.0/24 and have that subnet routed into our network. Please see the attached diagram. 200.1.1.2 is only used as the external facing management address of f...