Network Security

Resolved! Is it safe to run IPsec 9.0

hi,i have a spare ASA 5510 that i would like to deploy in a branch office just for temporary internet connection.the office will have a 10 meg metro e and would do IPsec VPN back to their HQ.is it safe to run the 5510 with 9.0 image with just 256 MB ...

Resolved! Static NAT / ACL

Hi All,I have some static NATs configured with relevant ACL "Inbound" on the Outside Interface.Simple Setup - I have inside and outside interface.If someone from Outside initiates a connection to one of my servers on a Static NAT. Will the return tra...

Resolved! ASA 5555 Expecting ASA Temporary Self Signed Certificate

Hello, I'm setting up a new ASA and need to get rid of the ASDM error message about a non-trusted certificate. Tried two ways to make it work:1. Created a self-signed cert in ASDM with CN=[ASA-IP], exported it, imported to Java under "security" and a...

Resolved! Virtual defence center not showing detailed network info

Summary dashboard is showing all the great stuff but when i drill down, no detailed network info is shown.The only detail i got is Operating system info. but No host, Source IP, or dest.What could be wrong? What to check?Running latest versions of al...

Trying to understand ASA and SCTP

Hi allI'm working along a PBX/VOIP operator trying to get a corporate VOIP setup to work. I'm not a VOIP guy and there are some things that leaves me clueless when it comes to how my ASA 5525 9.3(3) handles some of the VOIP traffic. In particular the...

Resolved! Bypass mode on sensor 7110

Hi Everyone, Need to confirm that under inline sets of sensor if bypass mode shows ----Yes will it allow the trafficif sensor diesor it is undergoing reboot process or if sensor is doing upgrade from version 5.3 to 5.4 RegardsMahesh

Anyconnect on Android not doing Split Tunnel

Greetings every1! I am running into an annoying issue with the AnyConnect client for Android related to Split Tunnel.Using a laptop with AnyConnect I am able to browse the Internet using the local laptop adapter. If I connect from an Android OS devic...

IPS module for ASA 5510 and ASA 5520

Hello,What is a good IPS/IDS module for ASA 5510 and ASA 5520. Our internet speed is 10MB.Thank you

ASA Firewall - Normal(Waiting)

Hi Guys,Im trying to get the failover state for one of the inside interfaces to change to Monitored, and it doesnt seem to be working. The switchport settings on the primary unit for the interface is exactly the same . Tried bouncing the switchport w...

Issue with "match port" command for class-map in CGR 2010

I am configuring a CGR 2010 and intend to use a zone based firewall setup. The problem is occurring when I attempt to add a "match port" statement to my class-maps. My intent is to match some custom tcp ports to let through. Here is a pared down v...

Cisco FireSIGHT Management Center

Dear All,I would like to ask that, is it mandatory to have Cisco FireSIGHT management Center OR Sourcefire Defence Center to configure and manage Cisco FirePOWER/ Sourcefire IPS appliances ? Thanks & Regards

OpenSSH patching of older Virtual Defense Center

Hello, We have an older SourceFire Virtual Defense Center (version 4.10.3.10). There are recently announced openssh vulnerabilities for which the fix is to update to openssh version 7.0. These are detailed in CVE-2015-6563 and CVE-2015-6564. My ques...

Does FirePOWER on 5512X need SSD drive?

SSD drive is not listed as a prerequisite for configuring a FirePOWER Service Module on an ASA. We have some existing 5512-X and would like to enable FirePOWER. So beside the FirePOWER license, do we need to buy the SSD for 5512-X as well? Thanks in ...

Resolved! FirePower Access Policy vs ASA access list

I'm looking to see if there are any caveats to consider when deploying a FirePower Access Policy that might conflict with a access list rule in the ASA. For example, if there is an access list rule that permits https traffic to siteA, and an Access P...

ASA 5545-X FirePOWER configuration

Dear Experts,I have recently configured 5545-X series firewall, now i want to configure ASA FirePOWER service Softerware version 5.3.1I can see the ASA FirePower Status and its showing UP through ASDM. Need your assistance for this. Many thanks,

Network Security

Forum Posts

Resolved! Is it safe to run IPsec 9.0

Resolved! Static NAT / ACL

Resolved! ASA 5555 Expecting ASA Temporary Self Signed Certificate

Resolved! Virtual defence center not showing detailed network info

Trying to understand ASA and SCTP

Resolved! Bypass mode on sensor 7110

Anyconnect on Android not doing Split Tunnel

IPS module for ASA 5510 and ASA 5520

ASA Firewall - Normal(Waiting)

Issue with "match port" command for class-map in CGR 2010

Cisco FireSIGHT Management Center

OpenSSH patching of older Virtual Defense Center

Does FirePOWER on 5512X need SSD drive?

Resolved! FirePower Access Policy vs ASA access list

ASA 5545-X FirePOWER configuration

Cisco FTD/FMC IPsec Tunnels: “Up” Doesn’t Always Mean Working

Cyber Vision Sensor version

FTD 7.2.5.1 → 7.6.2 Upgrade sftunnel TLS Failure — Certificate Mismatc

Suppress Closed Responses on Non Existent TCP/UDP Ports

FMC Upgrade to > 7.4 || 7.6

Vrf on FTD

Cisco official documentation to disable TLS 1.0 and TLS 1.1 on ASA

Network Design: New Collab Lab + Home Cloud/ Wifi

FTD AnyConnect RADIUS Authentication Issue Through IPsec Tunnel

Cisco FTD Evaluation Mode