Network Security

Hi Guys,On Cisco ASA, I wants to configure a rule with "SPECIFIC RULE Number"...  Example I want set the below access list for DMZ network, post configuration in ASDM this rule should appear as a 25th rule -- "access-list DMZ-IN extended permit tcp o...

Hello Everyone. we are testing a HTTP inspection on ASA for our corporate network in development network. after doing config of the commands policy-map type inspect http HTTP_Inspection_Map description Inspect the HTTP traffic parameters  protocol-vi...

Hi,  I am trying to allow http/80 connection on my new asa 5516 to access a web server. I am using static nat with port translation to redirect the traffic to the web server.   There are 2 problems: 1) Http traffic is blocked as soon as it arrives at...

Hi all,I'm after a plain English answer for a simple tech like myself. I'm trying to understand what each licensing component of the Cisco Firepower suite are. I work for a Cisco partner (I'm Cisco qualified), and neither our Cisco contact or distrib...

We just replaced ASA  IPS Module with FirePower, would it be better to use ASDM or FireSight to manage them? I very much appreciate you, experts-thank you

Dear All,i currently have a big problem with inter-interface routing within ASA. If you could please take a look at my topology.My big problem is i can't ping from .82 which is R1 to 172.20.0.161 (ASA outside interface), i created a scenario when the...

5506-X here - polices were working fine, then stopped.  I see in the real-time log viewer the SFR module is working - I see "SFR requested to drop TCP..." but the ASA is ignoring that and allowing the traffic.  Tried the usual reboots, etc.I have a s...

 Dear Team, We are getting following error, kindly tell me meaning for this error.Jul 31 04:12:12 Jul 31 2015 04:12:11: %ASA-4-313005: No matching connection for ICMP error message: icmp src outside:19.18.54.2 dst inside:10.8.1.11 (type 3, code 3) on...

Please can anyone tell me how ASA firewalls are better than SRX(Juniper)? I need to convince client with solid arguments why ASA is better than SRX. Please help me out.THanks

Hi, I have two cisco 2960 switches in my lab, VLAN 20 is configured  SW1-SW2 --- port 24  trunk  SW1 port 13 is DHCP Server portSW1 port 1 CLIENT 1 is connectedSW1 DHCP SNOOPING CONFIGURATION,ip dhcp snooping ip dhcp snooping vlan 20interface fa 0/13...

I have a Cisco ASA 5506-X running 9.4. I'm trying to ssh from a machine on the 192.168.1.0 interface to to 192.168.3.0. I have a wireless router using ssh WAN port 4444 that I'm trying to access.I realize the ssh line for the wlan is probably not rig...