Network Security

Hello all I'm running an ASA in transparent mode with several contexts. For simplicity lets assume I have two context, one for the 192.168.0.0/24 and one for the 192.168.1.0/24. The firewall rules are in the IN direction on the OUTSIDE interface. Out...

HI I have two cisco ASA 5545 that config as active-stnadby and there is two cisco 4510(with sup 7E) in downstream(inside zone of ASA) that config as active-standby(HSRP). now I want config two ASA's as a cluster and two 4510 as VSS. I read "BRKSEC-30...

Hi all, I have to make a lotus notes local server accessed by the external of our network. So, i did a public server from ASDM mapped from the local ip of the lotus notes to a public ip address. As, services permitted, i added http. But i can't acce...

I'm a bit stumped.  I have an ASA 5506-X (lab) that suddenly stopped permitting traffic through to my internal subnets.  When I run a packet trace, I get this, which stumps me because I've configured a rule to let the traffic through: RADAR# packet-...

Hi! I´m trying to find if someone already has upgraded a Cisco ASA 5545X configured as Active/Standby from version 9.1(5) to 9.4(2)11? which I saw on Cisco page marked as recomended.I´m thinking to apply this upgrade on next weekend, but I´m afraid s...

Can anyone knows what could be the reason of high ping latency, when I am pinging the ISP next hop router through cluster of ASAs and my inside interface on a cluster of cisco ASAs? When I leave one unit in a cluster of ASAs, ping is 1ms, when both u...

Migrating from 5505 to 5506-X and trying to set up FirePower. Have a full license, currently IPS and AMP in use. I get logging events from: - Blacklisted IP - security intelligence field - Malware detection But I can see no "intrusion prevention" (s...

Hi, I have the following set up; RTR01 (6500)  <-- VLAN4041 --> FWSM <-- VLAN40 --> RTR02 (Nexus 7K) Vlan 4041 is an SVI on the 6500 that the FWSM is installed in, Vlan 4041 is "outside" interfaceVlan 40 is trunked from the 6500 to an N7K which has a...

I have CSM 4.10 for managing my Cisco security devices. What do I need to do on ASA IPS module and CSM, so ASA IPS modules will be properly monitored by CSM? (dashboard widgets, event viewer, heath monitoring and rest).Thank you in advance!

We recently migrated from a Firewall Services Module Version 4.1(8) to a ASA 5585 running 9.5(2). We have been up and running on the ASA for about a week now. The only issue we've seen is with ACLs whereas some of them didnt port over and we had to e...