Network Security

hi all,currently, we're doing web filtering (on layer 3) via open dns cloud service.i know we can do regex and use a CX module.is there any other ways (or option) to do web filtering/DPI on the application layer with a NGN 5500-X firewall?http://www....

Hi all,Im encauntering a problem on adding URL domain to block . Below is my configclass-map match-any URL_LIST  match protocol http host *youtube.com  match protocol http host *facebook.com  ********  total 24 "match protocol http" command here  ***...

hi,I am having trouble receiving flows from ASA. There is no flow information on the netflow collector (Scrutinizer) and the only information it shows about ASA is its availability. I am using below config: access-list global_NF extended permit ip an...

I'm prepping to put a 5545-X in to replace a 5505. The 5505 was running pre-8.3, and our new one is running 9.1. I have been trying to do the most basic thing I thought possible (statically NAT'ing an internal server) and have had zero success. Can s...

I need to be able to ping a DMZ host from an INSIDE host and visa versa. I have tried configuring a static nat as follows static (INSIDE,DMZ) 192.168.10.0 192.168.10.0 netmask 255.255.255.0 I created an access-list called EXEMPT which permits any...

Hi , I am fairly new to the Firepower services, I am currently ordering equipment for a client, namely 2x 5516-FPWR-Bun Firewalls, I just want to confirm 2 things, Do I need a FirePower IPS  Licence (L-ASA5515-TA) per device? and secondly do I only n...

Hi,I am unable to get a ping response from a host whose gateway address is the ASA and it’s configured on an another VLAN. Note that connect to the host on other protocols i.e. RDP, HTTP, 23 etc.  Topology is something like this.My desktop is connect...

Hi,I have a ASA 5525 that connects to two networks - eg 10.10.10.0/24 and 11.11.11.0/24. Due to a requirement I need to configure port 0/0 for one-way out going traffic and 0/1 for one-way incoming traffic.My ASA ports will interface a BAE's data-dio...

Hi - I just can not find the following SKUs in CCW . Anyone can help with correct SKU and its replacement part numberDS-FIPS-KIT = REV-BOCisco4 labels and 0 shield per kit for ASA 5520ASA5585-X-FIPS-KITCisco8 labels and 1 shield per kit for ASA 5585

what is the difference in configuration in 5506X and 5505 ?default we use routed mode,why this link https://supportforums.cisco.com/discussion/12456891/asa-5506-x-switchportsneed switchport ?which kind of real practice need switchport in ASA?