Network Security

Hi All, i am currently replacing a PIX firewall with an ASA 9.5(1). I have configured the access rules but i am unsure on the best way of configuring PAT on the external interface, which is automatic on the PIX. I have created a container containing...

Hello I was implementing an acl statement as follows: access-list NAT_EXEMPTION extended permit tcp host 10.x.x.x object-group NameSRC eq #### and error came back immediately whic showed that: ASA(config)# nat (inside) 0 access-list NAT_EXEMPTIONERR...

This morning I received a relatively large number of detections for SWF.Exploit.Kit.tht.Talos .  They show as coming from multiple IP addresses within the last several days, with the first one on 12/9.   The file name is listed as adsapi.swf The Hash...

Hello,  We have a 5555-x with multiple interfaces. Our Outside interface and DMZ interfaces have routable IP addresses and DMZ subnet is routed via IP address of the outside interface.  Stripped for readability. interface GigabitEthernet0/0nameif o...

Hi team, I have a failover Cisco ASA 5525x  with SFR module with ip configured working through ASA management 0/0 (is our Backup SFR) It is connected to an access switch port. It was working as expected and I was able to ping the IP until a week ago...

Dear Team, We are using FWSM (version 4.0.11) which is managed by Cisco Security Manager (CSM) (version 4.4). We are planning to upgrade the FWSM to version 4.0.17. I need to know after the FWSM upgrade, do we need to delete the existing FWSM (versi...

Hi All, Good Day!! I am using Cisco ASA 5505 in our office and i want to deny all sites and allow only few networks. Is it possible to do like this and by using policy map i cant block https traffic. if it possble to do please some send me configur...

Hello,are there any plans to implement SSL decryption/ interception in the new ASA series (e.g. 5506-X or 5512-X)? If yes is there a road map? Kind Regards  

Dear all, I lost site to site vpn connectivity to one of remote office server from my office network after configured a static nat for public access for this server. It seems static nat is preferred over nat0 (vpn) hence i cannot access server over ...

Hi all,  I need to reset a firewall (ASA 5505) located somewhere , I would like to implement a remote reset using SSH in order to clean the configuration and with all port in shutdown... in other way with only a physical access available (using CONSO...

Hi All,   I just updated the the SFR software on the ASA5506 to the latest version 6.0, but when I try to create an access control policy it shows the following error:   after you click ok, it just shows the access control policy page without any op...

I am trying to issue command "ssh key-exchange group dhgroup14" on several of my ASA firewalls.  The key-exchange command is failing on 3 of 4 ASA firewalls.  According to Cisco documentation, this command was introducted in 8.4.  My ASA's are runnin...

Hello, I have a question on routes on a cisco asa. I setup a firewall for internet for IT users. The firewall has a management interface that we use to manage it from specific jump servers. The issue is that the IT Users need to access the mgmt(jump...