Network Security

I am trying to issue command "ssh key-exchange group dhgroup14" on several of my ASA firewalls.  The key-exchange command is failing on 3 of 4 ASA firewalls.  According to Cisco documentation, this command was introducted in 8.4.  My ASA's are runnin...

Hello, I have a question on routes on a cisco asa. I setup a firewall for internet for IT users. The firewall has a management interface that we use to manage it from specific jump servers. The issue is that the IT Users need to access the mgmt(jump)...

Hello, I am a newbie to the Cisco ASA world. So I am finding it difficult to understand certain configuration especially the ones configured in older versions. Can you please help me to understand the meaning of these commands: global (outside) 13 in...

Hi Friends, We have Cisco 5525 ASA Firewall, which is on Remote location and working fine. my equerry is if firewall fails/ reset, how can I login and workout, can use some thing auxiliary port or any latest process is there to login firewall in such...

Hi Team, I've tried this step to disable the ips sshv1. I would like to know how to revert back in "#Protocol 2,1" configuration. Here is the steps: 1) Assuming that you already have a service account created. Pls login via the service account.2) Log...

Hi Folks, Should I allow both the TCP and UDP port 3389 in the Cisco ASA 5545 firewall in order to allow RDP for accessing our terminal server from external networks. Regards, Ajay Sundar.N

Hi All,  Greetings for the day !!!!! I am pursuing the security course and I want to work on the ASDM GUI, but I am unable to find one. Could anyone help me out in providing the Download link or the software so that I can proceed further without any ...

Gents, As we know that packets with invalid/unreachable destination address received by a Cisco device can be discarded and device can further  generate  an  'ip  unreachable'  message  to  notify  the  sender  about  the  unreachable  host.   This c...

How do i determine if our ASA is capable of supporting the Firepower subscription? I don't seem to see any reference of it being a -X model. I'm assuming from looking around that the -X signifies that the Firewall is NGFW and capable of running these...

I have an ASA 5510 running 8.25. It cannot do PBR since this image doesn't support it. Here is what I'm looking to do: I have two ISPs. I want one subnet to use one ISP and the other to use the second ISP. The issue is that the ISPs are different. On...

Hello Cisco guy, I have an ISE 1.2.1 without any license. ISE will be used to control guest account for wired and wireless. I plan to apply license on it. My question is which license I should use (base vs advance) with 500 guest accounts? I don't ha...

We have a cisco ASA5510 EOL with UC Phone Proxy Licence, and we're buying  a new one ASA5512-X now to replace it. Is the licence running on the old one transferrable to the new ASA-5512-X or should we get anew one. Regards

Hi, I'm trying to configure an identity policy on Firepower module (6.0.0) using ASDM. I'm encountering this error when I try to save an identity source which is actually a user agent installed on my AD server.  Anyone has an idea how to solve this i...

Hi All, I have an ASA 5510 old one. Right now , we would like to migrate from old firewall to new firewall. The problem here is we have lots of  VPN users . All the user password are encrypted inside firewall.  Is there any way to decrypt the passwor...