Hi everyone, I have config bidirectional ACL from inside to DMZ inside(10.71.35.245)----ASA-----DMZ(192.168.134.33) port 389 packet tracer works fine and now I config ACL DMZ(192.168.134.33)----------ASA-----------inside(10.71.35.245) port 51173 pa...
Hi, Can we install Cisco ips in 4000 series routers. Which IPS is preferred and best (Cisco tradinional IPS or snort IPS) to apply in Cisco 4000 series routers. Could we use Cisco security manager to manage snort IPS in Cisco 4000 series routers.??? ...
Hello to everybody, I'm trying to install properly the DC200. I'm trying to connect in the serial console port, but with some problems... Please, see the image in attachment: 1) Which is the difference between ports 6 and 7? Both are management inter...
I have 2 ASA with SFR, both the ASA are configured with HA so the config on SFR needs to be same. I dont see any option on HA so I believe need to do config manually on both identical. I have added both the SFR in firepower management console and the...
I am running into a situation where I have duplicate subnets (10.1.1.0/24) with an internal network and an external vendor. The external vendor is coming across our PIX Firewall. Would it make sense to create a NAT statement on the outside interface ...
Hello all, so here is a complicated thing that I need to implement and need your help with NAT Commands: I have implemented RA AnyConnect VPN. My employees connect to my ASA with anyconnect and get the IP from: net_anyconnect_pool : 10.1.1.0/24 My in...
I'm not new to ASA firewalls at all, also know L2/L3 very well, but I'm having a terrible time getting an ASA 5500 config pulled together. I have a lab where I'm testing an ASA 5520 active/standby failover pair prior to rolling this out, and need to ...
Hi everyone. My customer has bought a pair of devices, a physical appliance and a virtual device license. We have already installed, configured and registered the physical one to the Defense Center with no issues whatsoever. It's even in production...
I am looking to upgrade my ASA 5505. I currently have 2 Site to Site ipsec VPNs, 2 NAT'ed VPNs and multiple remote access users. Will I run into any problems if I transfer the existing configuration from the ASA 5505 version 7.2 into a new ASA 5506 v...
First time posting so bear with me.I am looking for a best practice design reference for a customer that wants a two tier firewall structure. --Does anyone have a reference link/document/book? --Should the customer use different vendors at each tie...
Hello, Very simple question. Can I create some kind of description for my routes in ASA (5515)? For objects and interfaces we have the description command, for access-list we have remark command. But I don´t find an easy way to "note down" details fo...
I have internal Qualys vulnerability scans which target systems inside my web DMZ. Once my AMP 8150 IPS devices see the traffic it appears to be coming from a x-forwarded IP address on our load balancers. Two things I can see when I analyze the pac...
Hi Everyone, Simple question, how many user agents can I connect on FMC? I know I can have multiple agents configured, but how many is the limit? Are they all active at the same time or it works as active/backup?
hello, I have a 8140 firepower sensor that is supposed to handle IPS 6G of throughput as per the datasheet. This sensor is positioned at the edge of a small ISP serving internet traffic from dsl, 2g, 3g, etc... This sensor is licensed for IPS license...
Hi Guys Client of mine asked if i can quote them on the SSM-4GE for their client, but i see it is EOL and cant order it. Is there a replacement? Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 08-10-2026 08:58 AM | ||
| 08-10-2026 02:48 AM | ||
| 07-22-2026 05:00 AM | ||
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM |
| User | Count |
|---|---|
| 4 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
