Network Security

Hi, Currently I have a private line owned by SP and I setup a Backup line which is VPN tunnel. I'm using CIsco ASA 5512 on both sites I would like to ask the ff. 1.By default is Voip traffic permit or deny  by our firewall? 2. For Voice traffic do i ...

Hi,How to enable software bypass on clustered firepower 8350 devices.Sometime during troubleshooting we need to bypass IPS for test-traffic. How to achieve this without physical cabling changes/switch config changes.I  see Access Control rule with Tr...

Hi, Need to know the explanation of  NAT access-list policy extended permit ip host 192.168.60.207 host 192.203.187.140 nat (Outside) 1 access-list policy Above is zero nat zero that says if source is 192.168.60.207 and going to destination 192.203...

I ping a device with in the Firepower console, but cant escape from the reply sequence. Does anyone know the key combination to quit from the ping request? Thank you.

Hi I have some issue on Cisco ASA firewpoer licensing. Cisco tell us like that " The Cisco ASA with FirePOWER Services base configuration includes the AVC function by default. This feature provides application identification and control of more than...

I am trying to add ASA5508 to the firesight but failing. show netstat displays established session with DNS server. But with powersight, it is SYN_SENT My powersight is in the inside interface. show int ip br indicates the management 1/1 is in down/d...

Hello, I am testing a new ASA and I am having difficulties getting a machine that I have set up a static NAT for, getting out to the internet. It seems that I can get the traffic in. The test server is a test web server and from the outside I can rea...

Is there a way by which we can block all the connections from a country on Cisco ASA, without we manually defining a ACL. Hardware- Cisco ASA5510- Version - 9.0

Hi, I have got a question and run out of troubleshooting ideas. I have got 60Mb Fibre broadband coming in and connected to ASA 5505 Firewall and then our switches. When I test our speed without ASA 5505 Firewall I get more than 60mb. When I do run s...

How to Tshoot s-to-s VPN / Nat on 5510? SIte 1:Outside - 111.1.1.1/30Inside - 10.34.48.0/20 SIte 2:Outside - 222.1.1.1/30Inside - 10.34.16.0/20 For Site1:access-list no-nat-traffic extended permit ip 10.34.48.0 255.255.240.0 10.34.16.0 255.255.240.0a...

Hi All I'm using a Cisco ASA 5550 firewall. I have an external subnet on the internet eg 200.1.1.0/24 and have that subnet routed into our network. Please see the attached diagram. 200.1.1.2 is only used as the external facing management address of f...

Hi, when deploying four ASA firewalls in cluster mode, the health check monitoring cannot be customized like for Active/Passive setup? For example, we don't want a FW member to leave the cluster if the management interface goes down. Another example ...

Hi, I was having some weird NAT behavior with ASA 5500-X running 9.2.2.4. Here's the output of show nat. (IPs and interface names were altered for this post) Manual NAT Policies (Section 1)1 (inside) to (outside) source static obj-10.237.192.0 obj-...