Network Security

Resolved! Should I use static route toward to null0 if I using dynamic PAT in this scenario？

Hi All, Could anyone can resolve my confusing? I am considering the dynamic PAT, if the PAT addresses isn`t in a same subnets as outside interface address in ASA , I must advertise a static route which toward to ASA on upstream router, right? In g...

How to identify which process is causing high memory utilisation in 3D8250

How to identify which process is causing high memory utilisation in sourcefire sensor 3D8250 version 5.3.0.2. It is consistanly showing 97% utilisation

ASA 5512 Upgrade ( From 9.0.3 to 9.1.6)

Hello We have 2 ASAs( 5512) configured in active standby mode. Ios version is 9.0.3 for bothe the ASAs. We are trying to upgrade the IOS to 9.1.6 . First we upgraded the IOS to the version 9.1.3 at this point failover works properly. When we try to u...

ASA Firepower SFR Settings

Since SFR is managed thru Firesight, is there any need for SFR to connect to any other systems other than Firesight? Is it required for it to communicate to DNS, NTP (mandatory)?

Firesight 750 Setup

I have just received the new firesight appliance running on version 5.3.1-152 and need to upgrade it to 5.4.0-763. I have downloaded the iso file Sourcefire_Defense_Center_S3-5.4.0-763-Restore.ISO from Cisco site Is it going to wipe out all the confi...

Cisco ASA - Idenitiy certificate

I am doing a hardware upgrade of a ASA. I want to export the existing device identity certificate to the new device. After I have completed the export. Does the old device retain the certificate in case I need to regress the upgrade for whatever reas...

ASA 5585 IPS SSP - Default Deny?

Can the IPS SSP default deny all outbound traffic? I have a client that would like to deny all outbound traffic and create a whitelist of allowed destinations. I realize this could be accomplished in the firewall policy, just curious of the IPS modul...

Resolved! proxyarp

Hi, As in the picture attached ASA dmz also replying the ARP request. And the host 1 update arp cache with the ASA interface mac address . This stops the communication between HOST 1 and HOST 2 . How can i solve this issue ? other related c...

Resolved! ping does not work with no nat config

Hi Everyone, Here is setup Sw1---192.168.50.226-----------Firewall---------------192.168.50.230--Sw2 From Switch 1 i am trying to ping the interface IP of switch 2 which is directly connected to firewall but itdoes not work. Firewall has no NAT co...

Resolved! timeout ICMP issue - connection table exaust

Hi, I'm trying to figure out why does my ASA have a ICMP timeout of 1 hour instead of default 2 seconds as stated in the documentation and cli. fw-asa(config)# timeout icmp ? configure mode commands/options:<0:0:2> - <1193:0:0> Idle timeout for icm...

No access internet from Cisco 800 series

Hi I have mail server his ip is 192.168.1.4 internally my network and public ip is 78.93.244.61 when i test internet access to mail server it give test internet connection failed i call my isp i told them test internet connection failed please open ...

IPSec Tunnel between ASA 5510 and ASA 5505

Hello and hopefully someone here can help as I am not an expert in Cisco. I am having an issue with traffic thru a site to site tunnel. It appears that not all traffic is being allowed into the ASA 5505 from the ASA 5510. Configuration: HQ = ASA ...

Resolved! DMZ Question, though I believe the answer lies in NAT...Please see attached diagram

I have an ISP that has given us a 32 IP Block (30 IPs addressable). I have a switch which the inside interface of the ISP router is connected to. From another port on this switch I have connected to the Outside interface of the ASA. All this works as...

Resolved! ASA Firewall MGMT interface Management Advice Needed

I have SETUP ASA 5525-X firewalls in a HA pair. It's inside interface (Gi0/0) is terminated on L3 switch (vlan30), firewall will use L3 switch to reach all the inside segments. On the inside network we have vlan's for DATA (vlan10), MGMT(vlan20) and ...

Working with ISE 1.4 virtual machine

I just loaded an ISE 1.4 ISO into Parrallels to use as a lab server. Parrallels seemed to install the image properly, but I end up at a admin@ISE prompt that doesn't allow me to do much of anything. If I type ifconfig -a I can see the IP of the mac...

Network Security

Forum Posts

Resolved! Should I use static route toward to null0 if I using dynamic PAT in this scenario？

How to identify which process is causing high memory utilisation in 3D8250

ASA 5512 Upgrade ( From 9.0.3 to 9.1.6)

ASA Firepower SFR Settings

Firesight 750 Setup

Cisco ASA - Idenitiy certificate

ASA 5585 IPS SSP - Default Deny?

Resolved! proxyarp

Resolved! ping does not work with no nat config

Resolved! timeout ICMP issue - connection table exaust

No access internet from Cisco 800 series

IPSec Tunnel between ASA 5510 and ASA 5505

Resolved! DMZ Question, though I believe the answer lies in NAT...Please see attached diagram

Resolved! ASA Firewall MGMT interface Management Advice Needed

Working with ISE 1.4 virtual machine

Secure Firewall 1200 HA topology with 03 ISP link´s and SD-WAN

FMC 7.4.2.1: Missing active sessions in Remote Access VPN dashboard

FTD not recovering RADIUS server down

FMC 7.4.2.1-30 unsets/sets DNS domain-name every day

Cisco FTD SNMP OIDs for Site-to-Site and Remote Access VPN

Smart License lost after Powerfail / Reboot

Firepower 1120 has wrong (falcon demo) license active

L-CSF1230-TMC-3Y 's TOP SKU

FMC error has unknown CPU number

Cisco FirePower