Network Security

Hi Experts,Good Day!I have 2 ASAs and has 2 ISPs and this is for RA-VPN purpose which means traffic will initiate from outside. My question is, it is possible to have a VIP in the outside zone so that users from the outside will now connect to that V...

What is the most advanced firewall for a small size company with 100 of users?Does install a firewall can secure all the security of email, web, data and so on so forth?Urgent Urgent...thank you

Hi Experts,Good Day!I'm simulating a topology which is attached in this discussion. Technically, the design should the ISPSW1 is just L2 so that the ISPRTR1 and the FW will be point to point peers.My question is that my ASA's port channel pointing to...

Dear All,We have Cisco ASA5585-SSP10 with Cisco SFR-10 module deployed recently. But Cisco Firepower module shuts down automatically everyday. And after I "reset" it manually, it works properly. Could you guys please help me to resolve this problem. ...

Hi,I have CSM 4.7 managing a number of our ASAs and I notice that if there is an out of band change it will be detected right away and shown in the Configuration Manager by changing the state of the device to red. I know that you can do out of band c...

How do I allow for GigabitEthernet1/2 to talk to GigabitEthernet1/5 but not allow 5 to talk to 2? Each one of them successfully talks to outside.interface GigabitEthernet1/1 nameif outside security-level 0 ip address dhcp setroute!interface GigabitEt...

Hi, I'm trying to configure inbound PAT on my ASA connected to a DSL modem. I want outside(internet) clients to rdp to tcp/10000 which will be translated to the inside destination 192.168.0.2/3389I've tried a large number of config variations, but no...

Hi,If I have configure two interface with same security level, and run the command "same security-level permit inter interface" , then if any traffic is going in between the same security level interfaces ASA will maintain the state table or not.

Hi guys,I got a problem accessing a 5512-X via ASDM as the return traffic is being dropped on the firewall but I can't work out why.I have a global permit enabled on the ASA, as well is permits in/out on the interface but the packet-tracer shows drop...

I was playing around with URL logging on an ASA 5510 the other day. Pretty neat. But I was wondering if you could do a similar thing with DNS queries. I setup a regex to match anything and setup a class that referenced the regex. Then, I created a DN...

I recently upgraded a ASA 5510 from 8.2(1) to 9.1(4). I went the path of 8.2(1) to 8.4(6) to 9.1(4).Ever since, I have been getting the error %ASA-0-106100.The ACE referenced is access-list outside_acl line 4 extended permit udp any4 host 10.x.x.x eq...

I had dual isp configuration setup that was working fine in 9.3.1. Once the primary ISP line goes down, the second one would take over and once the Primary ISP line came back the Primary default route would be in place and everything worked fine, UNT...