Network Security

We recently purchased (2) ASA 5515-X with a 3 year IPS only license. The Firewalls are setup and working as expected, I have also completed the basic configuration of the CX module and applied the IPS license.  Can someone point me in the direction o...

I'm having a strange issue with ASA 9.3.1 on 5515-X.A vpn device is connected inside LAN and is natted to 2 different public IPs. The problem is that when the primary isp fails and comes back, the remote side is unable to connect to the vpn device th...

Hello all,I'm not understanding why my initial NAT configuration does not work.  Here's the goal: we have a site with only one external IP address.  At the site we have two web servers that do not have a default gateway.  We access other servers at t...

I've been trying to figure this our for a while now looking everywhere, so I'm not sure if I am missing something or just not phrasing my search criteria properly:Guests on the mobile guest network are unable to connect to the exchange server via the...

We have a guest wireless network configured that grants internet access only to users. The guest traffic is coming from a port on our 5508 WLC directly to the "guest" interface on our ASA 5510 (security level 50). The clients get DHCP from the WLC an...

Good Evening, I was wondering if anyone has been able to block Spotify as an application yet using the CX module? The issue I have is that although users can't download the application, if a user comes in with the application already installed they a...

I inherited an ASA with a new customer. I can connect using CLI, but would prefer ASDM.  I have tried to make the changes to the config and to me it looks like it should work, but I am missing something.  When I connect to https://XXX.XXX.183.202 , I...

Our  Management Provider is requesting for ASA5500 IPS license file to be uploaded to our ASA. We have already renewed our firewall contract with Cisco. Is this not automatic?

HI  How do we enable inspection traffic for h.323 and SIP on my Cisco ASA 5500 (ASA Version 8.4(7)3) via Cisco security manager (4.7).We have other traffic inspection enable currently. We know the process via CLI would like to do it via CSM due to or...

Hello all,I just set up a read-only profile for my ASAs. However, I'm not able only to use the function "Built Filter" in "Real Time Log Viewer". As you can see the attached image, I can't see the OK button.I'm using ISE, thus, the solution is setup ...

I have a lab set up to test ACL's with AD users/groups.Current setup:3 VMware instances on one host machine:Microsoft Server 2012 with Active Directory and DNSCisco Context Directory AgentWindows 7 This host is connected to the "Server" interface of ...