Network Security

Figure out connected VLAN

An ASA5515-X is sucessfully connected to a 2960X via an LACP port-channel. Someone has changed the config on the 2960X end of the port-channel so we've no idea which VLANs are being trunked or the IP addresses of the management SVI on said switch. Th...

CX module not accessible through browser..

Guys, I have Cisco Firewall & Firmware 9.0.1 i have installed CX module in it. Also done with partition & management ip has been assigned But still i m unable to access it through browser. Also i have rebooted firewall but didnt work. Any suggestio...

Resolved! Unable to retrieve data. Submit the saved changes. (Cisco Security Manager "Find Usage")

When I inCSM, click on "Policy Object Manager" and then choose in the list of any "Host" (or any other object), click on it, right click and choose "Find Usage", to see a list of ASA and rules where the object is used, I have when listing ASA and cli...

Resolved! Should I use static route toward to null0 if I using dynamic PAT in this scenario？

Hi All, Could anyone can resolve my confusing? I am considering the dynamic PAT, if the PAT addresses isn`t in a same subnets as outside interface address in ASA , I must advertise a static route which toward to ASA on upstream router, right? In g...

How to identify which process is causing high memory utilisation in 3D8250

How to identify which process is causing high memory utilisation in sourcefire sensor 3D8250 version 5.3.0.2. It is consistanly showing 97% utilisation

ASA 5512 Upgrade ( From 9.0.3 to 9.1.6)

Hello We have 2 ASAs( 5512) configured in active standby mode. Ios version is 9.0.3 for bothe the ASAs. We are trying to upgrade the IOS to 9.1.6 . First we upgraded the IOS to the version 9.1.3 at this point failover works properly. When we try to u...

ASA Firepower SFR Settings

Since SFR is managed thru Firesight, is there any need for SFR to connect to any other systems other than Firesight? Is it required for it to communicate to DNS, NTP (mandatory)?

Firesight 750 Setup

I have just received the new firesight appliance running on version 5.3.1-152 and need to upgrade it to 5.4.0-763. I have downloaded the iso file Sourcefire_Defense_Center_S3-5.4.0-763-Restore.ISO from Cisco site Is it going to wipe out all the confi...

Cisco ASA - Idenitiy certificate

I am doing a hardware upgrade of a ASA. I want to export the existing device identity certificate to the new device. After I have completed the export. Does the old device retain the certificate in case I need to regress the upgrade for whatever reas...

ASA 5585 IPS SSP - Default Deny?

Can the IPS SSP default deny all outbound traffic? I have a client that would like to deny all outbound traffic and create a whitelist of allowed destinations. I realize this could be accomplished in the firewall policy, just curious of the IPS modul...

Resolved! proxyarp

Hi, As in the picture attached ASA dmz also replying the ARP request. And the host 1 update arp cache with the ASA interface mac address . This stops the communication between HOST 1 and HOST 2 . How can i solve this issue ? other related c...

Resolved! ping does not work with no nat config

Hi Everyone, Here is setup Sw1---192.168.50.226-----------Firewall---------------192.168.50.230--Sw2 From Switch 1 i am trying to ping the interface IP of switch 2 which is directly connected to firewall but itdoes not work. Firewall has no NAT co...

Resolved! timeout ICMP issue - connection table exaust

Hi, I'm trying to figure out why does my ASA have a ICMP timeout of 1 hour instead of default 2 seconds as stated in the documentation and cli. fw-asa(config)# timeout icmp ? configure mode commands/options:<0:0:2> - <1193:0:0> Idle timeout for icm...

No access internet from Cisco 800 series

Hi I have mail server his ip is 192.168.1.4 internally my network and public ip is 78.93.244.61 when i test internet access to mail server it give test internet connection failed i call my isp i told them test internet connection failed please open ...

IPSec Tunnel between ASA 5510 and ASA 5505

Hello and hopefully someone here can help as I am not an expert in Cisco. I am having an issue with traffic thru a site to site tunnel. It appears that not all traffic is being allowed into the ASA 5505 from the ASA 5510. Configuration: HQ = ASA ...

Network Security

Forum Posts

Figure out connected VLAN

CX module not accessible through browser..

Resolved! Unable to retrieve data. Submit the saved changes. (Cisco Security Manager "Find Usage")

Resolved! Should I use static route toward to null0 if I using dynamic PAT in this scenario？

How to identify which process is causing high memory utilisation in 3D8250

ASA 5512 Upgrade ( From 9.0.3 to 9.1.6)

ASA Firepower SFR Settings

Firesight 750 Setup

Cisco ASA - Idenitiy certificate

ASA 5585 IPS SSP - Default Deny?

Resolved! proxyarp

Resolved! ping does not work with no nat config

Resolved! timeout ICMP issue - connection table exaust

No access internet from Cisco 800 series

IPSec Tunnel between ASA 5510 and ASA 5505

Reuse Object Group in a single ACL line

CSCwm49782 - enhance sma 2nd cruz heartbeat logging

FMC 7.4 and multi-instance FPR3130 chassis upgrades

Announcing the release of Firewall Migration Tool Version 7.7.10

CSCvx25052 - DOC: FTD Syslog messages 43000x missing from FMC

ACME on ASA

Snort3 rate filter

PBR with AnyConnect

FMC: Automatic renew certificates?

Finding the forgotten IP address of a Cisco PIX 506E