Network Security

AnyConnect VPN

I have configured Anyconnect VPN. I can connect to VPN from outside successfully but can not ping my server or map shared folder.can anybody have alook on firewall config and help me out. ASA Version 9.1(2) !hostname DASA2domain-name JDSYINGAA.comena...

Nexus 5k local user role permissions

I am trying to create a custom role for a local user on the switch. Does anyone have some experience? I only want it to have access to do these 3 commands: show queuing interface ethernet 1/3 show interface ethernet 1/3 counters detailed show inter...

Resolved! ASA version 9.2 NAT

Hi, I setup ASA 5515 to enable internet access. From CLI console, i can ping to 8.8.8.8, and any other external IP But internal user at PC not able to browse to Internet / http . I figure out must be NAT issue. Can help to check below config. ------...

Best Practice to Route all outgoing traffic to a URL like portal.office.com using a Specific ISP

Hi Everyone,As you can easily see, I’m very, very, VERY! new in security topics.There is a Office 365 project that we have dealing with. Here is the thing:1. We have a principal ISP connected to our firewall which supply all Internet incoming and out...

Resolved! Object network nonat

Good morning all (or evening, however) I have a question! I am looking to create a nonat object that contains an object-group. Is this possible?ASA version 8.6(1)2 object-group network awesome network-object host x.x.x.x network-object host x.x.x.y n...

clearing defence centre dashboard

Hi How can we reset the dashboard events in sourcefire defence centre. I was carrying out some testing on sourcefire however now before I put the device in production I want to reset all these test events. Thanks!!

how to troubleshooting ASA-4-420002 and ASA-4-313005

got some connection lost and then find following ASA log, originally there is no problem before, but suddenly 22 June 2015 has connection lost. why there is connection lost? is it related with configuration? %ASA-4-420002: IPS requested to drop TCP p...

ACL doesn't match packets for NAT purpose

Hi, I cannot understand why ACL does't match packets from PCs 192.168.8.2 or 192.168.8.3, but it matches 192.168.8.1(fa0/1).In Wiresahrk I see source 192.168.8.2 when I run ping 192.168.176.58 from 192.168.8.2. However, it must be 213.70.2.2By the w...

Resolved! FirePOWER & FireSIGHT Licensing Question

Hi, I recently deployed 5508X w FirePOWER and FireSIGHT MC. I licensed the product in FireSIGHT MC as below: My question is, because I don't have Control/Protection licenses enabled, I cannot license the added sensors or create any policies. "L-ASA55...

Initial Configuration of ASA 5505

Hello, I have a new ASA 5505 and a Win 7 Pro laptop. I cannot get the initial Java based Webstart to run so I can do intital configuration. I have the latest version of Java, and have also tried old versions of Java. Whatever is supposed to come from...

config firewall 5512

Hi, i am trying to configure my new firewall 5512. here is how i configure and not getting out to internet. My internet service provider has also a cisco firewall place on premise which has the following configuration. interface GigabitEthernet0/0 ...

What issue cause ASA1 cannot learning ASA`s interface route?

Hi all , I have a product environment like following. These four devices running OSPF protocol to exchange routing information. ASA2 can learned ASA1`s interface ip address which is 192.168.200.92/30 ,but ASA1 can not learned ASA2 `s interface ip add...

Resolved! ASA 5510 - How to use outside NAT, Traffic from internal adress using different wan adress for a specific port

Hey all,This is the situation:(the shown ip adresses are fictional)We have a server with the internal IP Adress of 10.1.100.2. Our public Adres is 214.214.214.214. We also have a public adress of 214.214.214.215.This server needs to send traffic over...

Cisco ASA FirePOWER Change of Management Interface

Hi,We have a scenario where on a 5515-X, where the interface used for management isn't going to be used for management of the firewall and therefore Firepower module. This is mainly because the management VLAN needs to be used for further, upstream a...