Network Security

I try to migrate checkpoint firewall to ASA firewall recently. I use Cisco tool to convert checkpoint rule to cisco ASA rule.after that, I see all rule match in global access-list. There are over 1000 rules after the convertion . I think about change...

Hi, I have a problem where I need BGP to failover between failover pair ASA5515 and Azure clould.The Azure cloud uses virtual dual routers and uses a script for the BGP setup which is limited.The dual Azure routers are not failover capableThe ASA's d...

Having problems with the user agent/AD integration.  I have installed the user agent on a Windows 2008 box, it seems to be communicating with the DC servers fine.  When going from the agent to the DC is where it seems the problem is.  I added the IP ...

Hi：   In the FWSM，the version is 4.1(7)，some static identidy NAT ，We need to delete；But We can't find the command： FWSM/contextA(config)# no static (inside,outside)  ?configure mode commands/options:  interface  Global address overload from interface...

I have a webserver in my DMZ that I need to access from the inside network, but need to use the internet IP address to reach it.  I can't use DNS rewrite because I'm using Citrix global server load balancing to serve the IP address for DNS, so it nee...

Whenever we run an FTP job that has to pass through 2x ASAs the connection is extremely slow (lots of dups).  Job runs fine when only running through one.  Both ASAs are running 9.2.  Any thoughts or pointers?

Hello community, how are you? Here I am again, having some issues with a pair of ASA 5505 (Sec Plus).This the scenario I have: ASA-1 ---> Only 1 ISP and LAN interface. ASA-2 ---> 2 ISP (main and secondary) and LAN interface. There is a VPN to access ...

Hi  I've been struggling to find information about ways to configure Thresholds for CPU and Memory notifications using CISCO 7000 series NX-OS devices. I found a CISCO .pdf document, explaining how to do so, but is made specifically for IOS, and I do...

Hi all,just one of my client is facing an issue related to lock out.we are trying to understand the behaviour of the cluster.A user is locked on the secondary device and not one the primary as it should be.inorder to unlock the user, my client has pe...

Hi, I wonder if anybody can help?I have 2 ASA 5580s in a failover configuration.  I would like to install a 10Gb PCI card in both units as part of a network upgrade.Can this be done without downtime by doing 1 device at a time and using failover to k...

Not sure what is wrong but something has broken lately with inbound FTP connections. we update to 9.1(6) and sense then Active FTP connections just don't work correctly. Can some one help?

Hi Experts,Good Day!I have an ASA5585-X IPS SSP-60 and it has currently connected to the Management 0/0 (for the ASA) and Management 1/0 (for the IPS module). Now, we are planning to use the other 2 management interfaces for OOB purposes. Is it possi...

FirePOWER Threat Defense for Integrated Services Routers ( ISR )(Live Webcast July 8, 2015 at 10:00 am Pacific Time / 1:00 pm Eastern Time)Ask questions from July 8, 2015 through July 17, 2015 In October 2013 Cisco acquired Source Fire, an industry l...