Hello, I have a simple config on a cisco asa. It has an outside, inside and another interface called "Core" When traffic from the inside goes out the outside int. its nat'd to the outside interface to a public IP. nat (inside,outside) after-auto so...
Hi, I have a couple of users configured in the DMZ zone in my office. These users want to access to a web application which is hosted in our data centre.The web application is hosted in inside zone of the data centre.We have a VPN tunnel terminated ...
Hello Cisco Security Community, I come to you for your help in understanding the code differences between ASA 8.3(1) and 9.1(1) code. We are moving from the 5520 ASA's to our new 5515-X ASA's. One of our sites is running ASA 8.3(1) (which I know is ...
folks I'm looking for your views on implementing ASA clustering (spanned etherchannel) across 2 data centres I have one ISP with a link into each site my plan is to have a single appliance in each site with a dedicated CCL 10Gb link between the firew...
Hello, My company is currently running a Cisco ASA 5510. We have been told by our 3rd party point of sale vendor that they are having issues syncing their database and server because they need TCP port 1433 & UDP port 1434 opened on the firewall. ...
Hello Everyone. I have a question regarding ASA 5505 firewall. Outbound interface has sec level 0: interface Vlan10 nameif outside security-level 0 Created acl to filter site-to-site traffic and triggered tunnel filtering: no sysopt connection permi...
i am using cisco anyconnect with IKEv2 (ios 9.5,anyconnect 4.2) .this configuration will support hotscan and CSD.
While the Firesight IPS sensor loads a rule update....snort restarts in order to load new configuration. However, when this happens, the IPS sensor drops multiple packets (about 20). Anyone know a way around this? The IPS is set to "fail-open" from t...
I've dug in some in the admin console and browsed the user guide... But it appears at first glance the reporting will not be granular to the point of dates, times, hits, and url for any specific user. A true user browsing report in detail like a prod...
Hi all, I'm trying to upgrade the Sourcefire 3D defese center 3D and the cisco network sensor from the 5.3.1.6 to the 5.4.0-763 but i failed.Is there any suggestion please ?
I noticed that I was only carrying roughly 1 days worth of connection events in Firesight and increased the max retention from 1 to 10 million. I will have to wait and see but simple math would tell me that will allow me to store 10 days worth of dat...
I have to demonstrate IPS signature with drop action in ASA AFR. Can anyone tell me the signature for large icmp packet size? Is it enabled by default?
Hello, I just have new ASA 5555-X with IPS activate planning to setup. However, how to setup so the IPS just running as a monitoring mode with so I can more easy to tune before active it. Because even running promiscuous mode active take action to...
Hey Im Running Firepower with on a 5555X. Using the FireSIGHT console to manage. When sending one of our internet connected interface through FirePOWER, the CPU jumps up 25-30 % on the ASA and the latency goes up with 40-150ms. I need to find out...
Hi everyone, Now i´m working with a ASA 5506X, and Sourcefire module, by now it´s working ok but i have an issue with the block page (Https response) beacuase only works with Internet Explorer and the other Browser dont, and also don´t show the http ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 08-26-2025 09:16 AM | ||
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM |
| User | Count |
|---|---|
| 8 | |
| 8 | |
| 7 | |
| 1 | |
| 1 |
