Network Security

I had some trouble, initally, getting 3389 (RDP) opened from the outside to redirect to a machine on my inside interface (LAN object). object network desktop host 192.168.1.10 object service 3389nat service tcp destination eq 3389 object network Work...

Hello everybody, I have a deployment of an ASA5585-SSP-10 pair (Act-Stby) which works with no issues. On the secondary unit we noticed that the FirePOWER module shows a 100% use of the /boot: > show disk Filesystem      Size  Used Avail Use% Mounted ...

Hi Guys, I have a ASA 5506 (v9.4.1) with sfr 6.0.0 and I don't have the opcion to create the NEW POLICY in the ASDM interface. Any ideo or solution?

Hi All,I am trying an ASAv deployment with IPv6. Topology has ASAv in routed mode and IPv6 VMs behind both inside and outside interfaces.Ping from outside VM to inside VM is successful and observe that the ipv6 neighbor table is populated rightly.Eve...

I currently am using the following info: object-group service rdap-ports tcp port-object eq ldap port-object eq httpsinternet-routers port-object eq h323 port-object eq sip port-object eq 5061 port-object eq 5222 port-object range 10001 13000 port-ob...

I am relatively new to firewall rules and need some help. We are about to add about 10 sub-nets and 6 virtual servers to our domain. We have an ASA 5505 firewall, version 7.2 with a basic license. Do I need to add VLANs for each of the sub-nets, or d...

Dear All, I have a cisco ASA 5525x with SFR software module installed on it. We were facing the issue of failover not happening. but yesterday all of a sudden we started getting below messages : VPUN1-FW01# sh failover history =======================...

Hi Everybody, currently I'm working on implement policies according to the CPPr but a couple of questions comes to my mind: 1. Is there any standard to start policing the Management traffic (SSH, SNMP, Telnet, etc)??2. How can I identify the current ...

HiHas anyone come across a case where you are unable to delete a policy from a DC? I have a policy with 0 applied devices on my 5.3.1 Virtual DC that gives me "This policy cannot be deleted because it is applied or currently applying to one or more d...

I added a second ISP and public IP block to my ASA that is running 9.5.2.  I use a route-map and ACL to match internal private IPs that are then sent to the Internet via the second ISP.  This seems to work fine for PAT. Since it was working well, I d...

Hello All, what all we required when  communicating from Inside(security level 100) to dmz (security level 25) both having private pools . inside ip 192.168.7.10 dmz ip 192.168.107.10 service rdp . I know we need to add ACL on DMZ-in apart from that ...

Hi, I am wondering how can I block people creating personal wireless hotspots like connectify in their computers. Can I block this from IPS module or ASA5585, same like I have already blocked torrents. Regards, Amit Dangi.

hi, i want to set up our ASA to send notification to our admin via mail, i am trying to configure email notification on Configuration > ASA FirePOWER Configuration > Local > System Policy but when i try to test it failed. thank you! Best Regards, Phi...