Network Security

I have an EZVPN running between two locations, Location A has a 5520 and is the EZVPN server, Location B has a 5506 and is a EZVPN client. Currently I'm trying to set NAT and ACL(s) so that hosts on the Location B inside network can access a few serv...

Hi, Team we had an issue with the ASA failover  the one should show standby , but it show failed State Last Failure Reason Date/TimeThis host - Secondary Active NoneOther host - Primary Failed Ifc Failure  inside: Failed could you help to undertand ...

Hi, Does Malware Cloud Lookup work reliably on Cisco ASA 5506-X running FirePOWER servicrs? When I enable that option with a file policy I notice that the deposition is listed as Unavailable most of the time for files I know are malware. I know the d...

HiWe have a new install thats still in learning mode.  I have an alert on the DC for one of the sensors saying that s1p1 - s1p4 has no link.We have an active/standby ASA pair behind the sensor. and 2 nexus's in front.  One nexus connects to s1p1 and ...

Hello everybody, As far as I know there is no Deep Inspection engine for MSSQL in Cisco ASA, so here arise a question. How to inspect MSSQL traffic in Cisco ASA or better to say how to inspect a custom service or port , where there is no Deep Inspec...

Hello, I'm seeting up a brand new, out of the box 5516x, i've followed every step of the configuration guide, configured the module in the same subnet and VLAN as the inside, but when loading asdm, which seems to take forever, it shows the firepower...

Hello,we have the problem, that a few server OSs are not correctly identified.Some of them are ESX hosts, some are appliances like CUCM.Is there any best practice or recommendation of solving this? I know I could start NMAP, fingerprint the server or...

  We have received following penetration vulnerability for Cisco ASA Firewall 5500 (S/N: JM164940Q0) Vulnerabilities Risk/Severity Recommendation by vendor for closure of vulnerabilities Multiple issues related to SSL certificates were identified...

Hi, I have the following  configuration , but it does not working , logging enableno snmp-server locationno snmp-server contact snmp-server host INSIDE 192.168.2.1 trap community passwordd snmp-server enable traps syslog logging history notifications...

Hi All I have a server on our internal network that has very limited access from the internet. Therefore it has an external address that is NAT'd at our firewall. However I want to arrange to access the server from our LAN also using its external add...

Hi, Currently I have a private line owned by SP and I setup a Backup line which is VPN tunnel. I'm using CIsco ASA 5512 on both sites I would like to ask the ff. 1.By default is Voip traffic permit or deny  by our firewall? 2. For Voice traffic do i ...

Hi,How to enable software bypass on clustered firepower 8350 devices.Sometime during troubleshooting we need to bypass IPS for test-traffic. How to achieve this without physical cabling changes/switch config changes.I  see Access Control rule with Tr...

Hi, Need to know the explanation of  NAT access-list policy extended permit ip host 192.168.60.207 host 192.203.187.140 nat (Outside) 1 access-list policy Above is zero nat zero that says if source is 192.168.60.207 and going to destination 192.203...