Network Security

Hello, I am trying to block vpn/tunnel traffic and finding that no policy is able to block the vpn traffic.  All ports other than TCP port 80 and 443 are blocked for the client by the ASA so the vpn tunnels through port 443.  The access policy I hav...

Is Firesight management center capable of configuring normal ASA firewall rules on an ASA5585X with Firepower module?That means I no longer need to use ASDM to configure normal firewall rules.

Good Day all,  Currently I am performing a POV for ASA5515-X with FirePOWER Services using transparent mode. However I ran into some issues, such as traffic becomes dropped the moment it entered the ASA. My customer's network is a simple network with...

Hi All, I have Cisco ASA firewall running 9.1 ios, with IPSec tunnel terminated on Outside interface which is up, the interesting traffic from other side peer is sourced with 192.168.10.2 to destination 172.16.10.2,  And the ip 172.16.10.2 is Stati...

Hi, i am trying to understand Firepower licensing but still don't understand it very well. I would like to have ASA5512 with basic URL filtering (without reputation functions etc.). I just need to create whitelist or blacklist and that's it. When i a...

Have: 5506-X running 9.5-2 and also 9.4-2. SFR module images: 6.0.0-1005.img  and .pkg Issue: When ASA is running 9.5-2 code, I successfully boot SFR using the 6.0.0 BOOT image. BUT when trying to install the PKG system install) - I get 'Upgrade Abor...

Guys As the title suggested, we have two ASA5510 firewalls running fail-over (active-standby), however we have been experiencing packet loss (2 ping drops every minutes) for traffic traversing the firewalls (between multiple servers), however when we...

Hello, I have ASA 5512-X with firepower (v5.4) and FS750 appliance (v5.4). Everything is connected and configured as per instructions on:http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-144598 Detailed pictur...

Hello, I've spent hours going round in circles trying to work out what I'm doing wrong here.  I have a server in the DMZ on one ASA 5512 interface, and an internal network on a different one.  What I want to do is to make the DMZ host accessible on t...

Looking to connect from my work computer to my DMZ server using its external IP address. Internal work computer IP: 192.168.1.35 /24 DMZ server IP: 192.168.10.11 /24 External IP address: 5.103.x.x (i only have a single ip address) Can anyone help m...

Hello everybody let's say we have an ASA 5500-x with firepower service and a 3 years subscription license for ips and url and license for Firesight. do we need any more licenses for updating signatures in this 3 years ? Thanks

Hello last night we had ASAs IOS upgrade, when  our ASAs booted up our data center went down and we lost our connectivity to the boxes after getting access to the box with remote hand help , we observed that ospf between our ASAs firewall and core sw...