Network Security

Hello,are there any plans to implement SSL decryption/ interception in the new ASA series (e.g. 5506-X or 5512-X)? If yes is there a road map? Kind Regards  

Dear all, I lost site to site vpn connectivity to one of remote office server from my office network after configured a static nat for public access for this server. It seems static nat is preferred over nat0 (vpn) hence i cannot access server over ...

Hi all,  I need to reset a firewall (ASA 5505) located somewhere , I would like to implement a remote reset using SSH in order to clean the configuration and with all port in shutdown... in other way with only a physical access available (using CONSO...

Hi All,   I just updated the the SFR software on the ASA5506 to the latest version 6.0, but when I try to create an access control policy it shows the following error:   after you click ok, it just shows the access control policy page without any op...

I am trying to issue command "ssh key-exchange group dhgroup14" on several of my ASA firewalls.  The key-exchange command is failing on 3 of 4 ASA firewalls.  According to Cisco documentation, this command was introducted in 8.4.  My ASA's are runnin...

Hello, I have a question on routes on a cisco asa. I setup a firewall for internet for IT users. The firewall has a management interface that we use to manage it from specific jump servers. The issue is that the IT Users need to access the mgmt(jump...

Hello, I am a newbie to the Cisco ASA world. So I am finding it difficult to understand certain configuration especially the ones configured in older versions. Can you please help me to understand the meaning of these commands: global (outside) 13 in...

Hi Friends, We have Cisco 5525 ASA Firewall, which is on Remote location and working fine. my equerry is if firewall fails/ reset, how can I login and workout, can use some thing auxiliary port or any latest process is there to login firewall in suc...

Hi Team, I've tried this step to disable the ips sshv1. I would like to know how to revert back in "#Protocol 2,1" configuration. Here is the steps: 1) Assuming that you already have a service account created. Pls login via the service account.2) Lo...

Hi Folks, Should I allow both the TCP and UDP port 3389 in the Cisco ASA 5545 firewall in order to allow RDP for accessing our terminal server from external networks. Regards, Ajay Sundar.N

Hi All,  Greetings for the day !!!!! I am pursuing the security course and I want to work on the ASDM GUI, but I am unable to find one. Could anyone help me out in providing the Download link or the software so that I can proceed further without any ...

Gents, As we know that packets with invalid/unreachable destination address received by a Cisco device can be discarded and device can further  generate  an  'ip  unreachable'  message  to  notify  the  sender  about  the  unreachable  host.   This ...

How do i determine if our ASA is capable of supporting the Firepower subscription? I don't seem to see any reference of it being a -X model. I'm assuming from looking around that the -X signifies that the Firewall is NGFW and capable of running these...

I have an ASA 5510 running 8.25. It cannot do PBR since this image doesn't support it. Here is what I'm looking to do: I have two ISPs. I want one subnet to use one ISP and the other to use the second ISP. The issue is that the ISPs are different. ...

Hello Cisco guy, I have an ISE 1.2.1 without any license. ISE will be used to control guest account for wired and wireless. I plan to apply license on it. My question is which license I should use (base vs advance) with 500 guest accounts? I don't ha...