Network Security

Resolved! Routing issues

Good day,I am having an issue with our new ASA. The issue has to do with routing. I had this post in the routing forum but someone said it would better suited for the firewall forum. I am going to put the link to my original question and answers to t...

Resolved! Deny TCP reverse path check from 121.241.249.101 to 28.29.30.31 on interface inside

Hi all, we are facing the Ip spoofing issue and at time i was unable login to the firewall when spoofing was happend adn 121.241.249.101 and 28.29.30.31 are not my ips and anti spoofing has been enable in my firewall both inside and outside but we fa...

programming C/C++

How to enter the "enable" password with my program? OS Linux.used the ssh library:libssh.hhttp://www.libssh.org/ thank you!

Resolved! ASA CX software / boot issue

I am having trouble booting a cx image on a ASA 5512-X. The ASA is running 9.1.2, the cx software I am trying to boot is 9.1.2(29) and I get an error as per below:asacx-boot>system install https://www.xyz.com/s/g4xw7wbr8texoku/asacx-sys-9.1.2-29.pkg?...

Conception problem of max connection and maximum per client

Hello,Some conception about connection max and max per client. Following example say inside network is 100.100.100.0/24 and now limit the connection for each connecting from OUTSIDE----access-list conns-traffic extended permit ip any 100.100.100.0 2...

cisco ASA 5520 Firewall Throughput

It is very interesting and tricky. ASA5520 has four 1Gbps interface but the box itself only support 450Mbps (According to datasheet). How to explain this? Does this mean if the interface receive 1Gbps traffic, then firewall will drop the packets? Th...

Resolved! ASA5505 does not appear to import one of the routes from an OSPF neighbor

I have an ASA5505 running 9.2.3 and I noticed an issue by chance when setting up some connections. The 5505 does not seem to be able to pull in a 10.0.0.0 255.0.0.0 route into the ASA routing table from the core routing using OSPF. I have a ASA5510 o...

Converting a Palo Alto Firewall to a Cisco ASA - recommendations?

I've seen some tools for converting ASA's to PA... but not the other way around. Anyone come up with a good method? (scripts, tools, etc?) Thanks in advance!

Sourcefire on ASA security Zone

I am looking for some information on the ability to write Zone Based access Control rules using the Sourcefire on ASA module. I can create ASA security Zones which it looks like basically just associate the interfaces on the ASA with a security Zone,...

Resolved! IronPort to PRSM Managed CX Module Migration 5515-X

We are currently running a Cisco IronPort web proxy to filter traffic based on policies. I am setting up a pair of new ASA 5515-X series firewalls to replace a single ASA 5520 that's. The new 5515-X has a CX module that is managed by a Cisco PRSM ser...

CX Module Console Error

Hi, Getting below error while trying to console CX module from ASA.HQ-JNM-ASA/act# session cxsc consoleERROR: An existing console session is in progress with module cxsc. Only one is allowed at any point in time. Have tried resolving the issue throug...

Load Balancing Inbound Traffic Two ISP

Hello everyboy,I have the following topology, DMZ Network -> ASA (Active/Standby) -> Two Routers Cisco 2951 -> Two ISP Mi question if there is a way to truly get load balancing for the inbound traffic to one server, so the server can respond request...

Resolved! Allow public to server IP address

Hello I have ASA 5510 with 3 X interfaces " inside , DMZ , Outside". We have a solution one server located on DMZ with IP address 192.168.2.10which published to internet with IP address 193.50.15.23 and we have an internal server with IP address 10...

Shun packet fine tune

Hello,There are many log related to following"%ASA-4-401004: Shunned packet: IP_src ==> IP_dest"I would like to know more details which threat detection rule was hit? It will useful for me to adjust its Treat Dedication setting.Since "show threat-de...

ASA Temperature OID

Hi everyone , can you please till me what is the temperature OID for the ASA to be monitor by SNMP server

Network Security

Forum Posts

Resolved! Routing issues

Resolved! Deny TCP reverse path check from 121.241.249.101 to 28.29.30.31 on interface inside

programming C/C++

Resolved! ASA CX software / boot issue

Conception problem of max connection and maximum per client

cisco ASA 5520 Firewall Throughput

Resolved! ASA5505 does not appear to import one of the routes from an OSPF neighbor

Converting a Palo Alto Firewall to a Cisco ASA - recommendations?

Sourcefire on ASA security Zone

Resolved! IronPort to PRSM Managed CX Module Migration 5515-X

CX Module Console Error

Load Balancing Inbound Traffic Two ISP

Resolved! Allow public to server IP address

Shun packet fine tune

ASA Temperature OID

Cisco FTD/FMC IPsec Tunnels: “Up” Doesn’t Always Mean Working

Cyber Vision Sensor version

FTD 7.2.5.1 → 7.6.2 Upgrade sftunnel TLS Failure — Certificate Mismatc

Suppress Closed Responses on Non Existent TCP/UDP Ports

FMC Upgrade to > 7.4 || 7.6

How does BGP flowspec work

FTD to AWS VPN gateway IKEv2 phase 1 lifetime mismatch

IPs needs to excluded from protected network Site to Site VPN on FTD

FTD HA Pair - Config Sync Status: What does "Sync Skipped" mean?

FTD Route Based VPN question