Can ASA with FirePower services inspect SSL traffic or we need SSL inspection appliance.How can ASA force Application Control for SSL. Let say, allow only reading of Social Networking while bloking upload/post if not be able to see inside SSL?
We're using a virtual ISE, which I have now added to Prime.First thing: Device type is set to 'unsupported Cisco Device' - but Prime 2.2 is supporting ISE 1.2.x isn't it.Anyway.. CLI and GUI Credentials are set correctly but after synchronizing it sa...
We have a pair of 5515 in active/failover. There is a subinterface inside interface which on the primary ASA shows as Normal, but failed on the Standby. From 'show failover' commandIf we access the standby ASA and run the 'show failover' command the...
I'm working to set up Citrix netscalers with global server load balancing (gslb) across two different locations. The default config on the netscalers when completed makes the two talk to each other over the internet over port TCP 3011. When you cho...
Hi all, What is role of Sourcefire User Agent on Active Directory,(is it required?) When we connect Sourcefire defense center to AD, we need to create LDAP Connection what exactly Ldap does in this Scenario Confusion between Defense center vs firepo...
I have the SFUA 2.2 agent installed on a Server2012R2 DC. I am able to see login and logoff events in Event Viewer on that server for my AD account.Everything looks good in the Agent UI and the I do not notice any errors in the logs. Also I can telne...
It appears that if I block a URL that is reached only via HTTPS (Facebook in this case) I cannot display an HTTP response that informs the user as to what happened, they just get a connection reset error. Is that a limitation of the URL filter or do ...
OK, this one has me stumped. Trying to connect the client to work spaces, it needs access to port 4172 for TCP and UDP. I have the Inside ACL allowing access to 4172, I see hits, I see the packet come in, but thats it. I can't see if it is transla...
Having a lot of trouble with this...even with Advanced Services helping. We are trying to put a guest anchor controller out off of a active/standby 5555-X pair, with a SourceFire 7150 appliance (TAP mode, just passing traffic) between. TAC and AS s...
I hope someone can help us with this:We are considering different designs for our core network and are investigating the purchase of a Cluster license for our 5585-X. Someone pointed out that maybe the ASA-5585-SEC-PL will activate our 10TenG interfa...
HelloHow to find sourcefire lab on Cisco dcloud,I am not getting in Security section of dcloudI would like to know what is the requirement for access the lab, if i have cisco.com ID?
Hi everyone, PC traffic ------Switch ----X int ASA-----y int ----server 172.31.50.55 I see below log when user try to access the server106021: Deny TCP reverse path check from 192.168.100.25 to 172.31.50.55 on interface X Does it mean that ASA did n...
HiI am new to firewalls and was wondering if this will work. I have an internal FTP server where we copy files to and they automatically get sent to an external suppliers FTP server who's network sits on a separate interface on our asa using a public...
