Hi Team.I have a host on LAN that is trying to build IPSEC VPN with remote site.I am using Dynamic PAT for all traffic.I believe it should work.But interestingly, I see all traffic getting NAT but not UDP 500.Any idea why? Ideally i want UDP 500 and ...
Forum Posts
ASA Version: 9.6(4)41ASDM Version: 7.15(1)150 There’s are few enquiries about ASA5545-X Firewall1. Does ASA support wildcard mask?2. Does ASA firewall support FQDN? Any limitation? Any KB related to above queries?
Hello everyone;I have recently been contracted to deploy CISCO Fire Power 1010 ASA, so I normally register them from the office, then move them to the sites where they are supposed to be deployed, but then I experience that, after registering the dev...
Greetings,I hope to help you clarify the concept of (ACL, Allowing and Denying).I have a Cloud portal where I hosted Two Servers, and the support team added a section for me (Firewall), which is just an ACL.SRV1 IP: 20.200.92.20SRV2 IP: 20.200.108.10...
Hello,I'm trying to configure Cisco Secure Firewall ACP File Policy to exclude Windows Updates from being scanned. I inserted an ACP rule just above the rule with the File Policy. It simply allows traffic to Microsoft Updates or Windows Updates with ...
I have two Cisco FTDs in AWS. Both the firewalls are active and are behind a load balancer. I am trying to setup a site-to-site vpn from the firewall to a remote site. Can someone share a document how we can achieve this with two Cisco FTDs behing a ...
HI guys hope you doing good.Sorry should i know how to filter my customers to access social media.
Hi, I have upgraded to ASA9-14-4-24-smp-k8 and it was successful.I also have to upgrade the asdm module, I have a asdm-7202 and asdm-openjre-7202.Question, do I need the openjre file ...? if so, do I need to point it someone or just drop it in flash:...
I got alerts from my Firepower this morning for this. The source IP is my DNS server, and the destination was my DNS provider. I can't find anything in the alert that I can use to locate the system that actually issued the request to my DNS server. I...
Hi Team , i need remove weaker encryption algorithms on a Cisco 3750. I have switch WS-C3750-48P, SW Version 12.2(55)SE11, Image c3750-ipbasek9-mz.122-55.SE11, k9 Version. The command that I' m going to apply are ip ssh dh min size 4096 ip ssh serv...
Hi All,we have run tenable scan and we have Vulnerability in Cisco switch Catalyst 3850 48 Port PoE and we find the some vulnerability given below.1.Cisco IOS XE Software Command Authorization Bypass (cisco-sa-aaascp-Tyj4fEJm)2.Telnet Vulnerability A...
Now upgraded to FTDv100 on VMWare to 7.4.2, got the following issues: Unlike in 7.3.2, which suddenly stopped all the traffic on interfaces, now on 7.4.2: - suddenly HostScan stopped working properly, stuck on "HostScan mission complete" and not mov...
Hello All,In my company we have run tenable scan and we have Vulnerability in Cisco switch Catalyst 3850 48 Port PoE SNMP Agent Default Community Name (public)Can you help to fix this issue ? Can any one help in this issue.
Resolved! ASA Same Security-Level 100
HiWe are moving from an EVPL to SDWAN, and for that I needed to configure another interface on the ASA (it currently has a 0-security level). What I would like to do is to have the two interfaces (inside and SDWAN) have the same security level of 10...
my company has the firepower 1120. when i want upfate, maualy or scheduled, geolocation, vdb, intrusion rule, i receive error like on picture i noticed on my device dri-firepower# show timezoneTimezone: UTCdri-firepower# show clockThu Aug 15 06:42:08...
