Network Security

Hi I am trying to setup a capture using type asp-drop to capture dropped traffic between a internal network and an external network and I need to monitor the drop for 24hrs. I am using the commands capture cap1 type asp-drop all match ip source subne...

Hi all: I have configured the ASA FirePower address through ASA session sfr command line. The FireSight IP address is configured through the console. Both IP address are ping-able.The FireSight Manager of the ASA also has been set to the IP address t...

Hello,  I am trying to set up a guest network on a ASA 5512 but to no avail. I have attached the config, am I missing anything? Thanks all!

Hi,   Please help me to understand how the acl works on asa code 9.x   If i want to block a host (172.16.10.250) from dmz  zone to outside (internet access ) and rest of the network should access .How can i do that ?   Which acl  from  below (1,2,3 &...

hello guys, good morning !! i was trying to do password recovery in asa 5505. but i don't have image in my disk and i don't have tftp server even and even i tried to push reset button behind the firewall but it doesn't work.so you guys have any other...

What is the maximum CRL size an ASA can support?  When configuring VPN for certificate authentication, I'd like to do CRL checking, but I've heard from another customer that they hit an issue with CRLs above a few MBs. Searching, the ONLY thing I've ...

Hi all, I have a 5525x and wanted to setup the FirePower that comes with the ASA. I have read and followed the Cisco installation guide, but I am unable to access the FirePower module on the ASA. What I have done; 1. Installed FireSight Mangement ---...

After I bring up the ASDM-IDM Launcher and enter my username and password, it loads the software from cache to 100%.  Once the software load is complete, the wristwatch icon shows up and hangs.  It will not bring up the WEBgui.  I can log in via comm...

Hi, sorry for newbie question, just started to learn ASA. Is it possible on ASA (9.0) to make a static nat with port translation for one internal server (publish dns, smtp) and dynamic PAT for other internal users, using only one public address? Can ...

Hello everyone! Please I need your support with a configuration about traffic SIP NAT-PAT on my Cisco ASA 5520, we have this configuration in this moment but no working properly.In the global-policies, I tried enable and disable the SIP inspection wi...

Hi, Please can anyone offer any advise on the below issue I am having? Inbound traffic on sub-interface is bypassing/ignoring the destination NAT rules.    The NAT rules are setup to work with multiple interfaces and the NAT rules are working ok with...

Hi, I have ASA 5510 firewalls in Active/Standby, and need to perform OS upgrade on it.  Able to upload the image (.bin) file on Active firewall; however when I upload it on to the Standby firewall (and approx 80% is transferred), it reloads.Strange! ...

I have an HP 5406 r zl2 switch and Cisco ASA 5525-x device.  Is it necessary to define an IP or vlan in transparent mode on  this devices?Or is it needed to make a specific configuration?I just could define inside and outside interfaces. isnt it suff...