Network Security

Hi, I"m looking to confirm that NAT is not needed when crossing ASA interfaces; for example, when going from an inside interface (sec 100) to a dmz interface (sec 50) and back. Back when NAT was required to cross ASA interfaces, I know there were dif...

Hi all! We are facing some issues when we migrated our Cisco ASA Contexts from version 9.1(1) to version 9.2(4) on new hardware, Cisco ASA 5585-X. We are doing this migration because we have two Cisco ASA 5585 working in failover pair with approx 70 ...

Hello, I am trying to block vpn/tunnel traffic and finding that no policy is able to block the vpn traffic.  All ports other than TCP port 80 and 443 are blocked for the client by the ASA so the vpn tunnels through port 443.  The access policy I have...

Is Firesight management center capable of configuring normal ASA firewall rules on an ASA5585X with Firepower module?That means I no longer need to use ASDM to configure normal firewall rules.

Good Day all,  Currently I am performing a POV for ASA5515-X with FirePOWER Services using transparent mode. However I ran into some issues, such as traffic becomes dropped the moment it entered the ASA. My customer's network is a simple network with...

Hi All, I have Cisco ASA firewall running 9.1 ios, with IPSec tunnel terminated on Outside interface which is up, the interesting traffic from other side peer is sourced with 192.168.10.2 to destination 172.16.10.2,  And the ip 172.16.10.2 is Static ...

Hi, i am trying to understand Firepower licensing but still don't understand it very well. I would like to have ASA5512 with basic URL filtering (without reputation functions etc.). I just need to create whitelist or blacklist and that's it. When i a...

Have: 5506-X running 9.5-2 and also 9.4-2. SFR module images: 6.0.0-1005.img  and .pkg Issue: When ASA is running 9.5-2 code, I successfully boot SFR using the 6.0.0 BOOT image. BUT when trying to install the PKG system install) - I get 'Upgrade Abor...

Guys As the title suggested, we have two ASA5510 firewalls running fail-over (active-standby), however we have been experiencing packet loss (2 ping drops every minutes) for traffic traversing the firewalls (between multiple servers), however when we...

Hello, I have ASA 5512-X with firepower (v5.4) and FS750 appliance (v5.4). Everything is connected and configured as per instructions on:http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-144598 Detailed pictur...

Hello, I've spent hours going round in circles trying to work out what I'm doing wrong here.  I have a server in the DMZ on one ASA 5512 interface, and an internal network on a different one.  What I want to do is to make the DMZ host accessible on t...