Network Security

I am not sure if I need an NAT based access-list, route map, twice NAT, or an object based NAT. I've done some reading and I feel like ACL or route-map NAT is the way to go but am looking for guidance.  My situation is: ASA 5510 Active/Passive Cisco ...

How to block websites like facebook & Youtube on this appliance. Detail Instructions Please. Thanks 

Hello.I have the Firepower version 6.0.1 on ASA5525-X. The traffic is mirrored on the ASA. In Firesight device added, the policy created, intrusion detected.If the policy of incursions in the section "Firepower Recommended Rules Configuration" select...

I need to allow a customer to start, stop and show ip accounting but I cant give him full privilege access to the configuration mode. I am thinking of creating a menu for this but I don't know if this will allow me to run commands in the config mode....

Hi, I would need the CLI parameters to deploy the ASAv image in Azure, because the Marketplace template is locked to only be deployed in a new Resource Group. For a CSR 1000v, it is like this from the Developer Command Prompt for VS2015: azure vm cre...

Basic problem: FTP server working via SSL. Connecting to it, trying to download/upload files, but they are not identified by name in FMC.  SSL Decryption  and File Policy is in place (unless there is some tricky configuration to be done) - connection...

We've been managing 2 Cisco ASA based FirePower modules with the 2 device VM ordered with part number FS-VMW-2-SW-K9.   It's being suggested that I have to throw that away and order the FS-VMW-10-SW-K9 (manages up to 10 devices) because we need to ma...

Has anyone seen this message after deploying a new NAT on an ASA. PAT pool exhausted. Unable to create TCP connection from outside. portmap translation creation failed for tcp src outside

Hi, I am setting up a NAT firewall. Could you help me understand why the below: Asymmetric NAT rules matched for forward and reverse flows; Connection for udp src outside-AeC-EBT:10.230.127.35/55812 dst inside-AeC-EST:192.168.224.15/162 denied due to...

Software Version 9.1(7)4 <context> ASA5585-SSP-10 We have an ASA in context mode and I have not worked with this setup before. I am just wondering what changes are made in system context and what changes are made in each individual context. For examp...

Hi, i've a new ASA 5506 9.5.2. On this asa i've configure one interface (phisical) as called LAN1. 192.168.40.1/24. Behind this interface there's  a web server called POOL with 192.168.40.2 DFT GTW 192.168.40.1. There's another host in this network c...

Hello, i am new to SFR. I need to change the config on the module after i configured it initialy. How do you Redo the sfr  setup.  it is a 5585x module. Thank you

Hi, I have a short question. I am using two cisco ASA in A/S failover. I am planning to move them to A/A configuration. The problem is I am very far from this devices and I have no console connection to them (only SSH). Will i lose connectivity durin...