Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Resolved! how to create an rule with action to subtract from the event log of Ips manager express console?

how to create an rule with action to subtract from the event log of Ips manager express console?, some knows of has an guide?.Thank you.Sent from Cisco Technical Support iPad App

IPS license for ASA5525

We purchased an ASA5525-K9 and would now like to add IPS functionality to the firewall. i believe i need part# L-ASA5525-IPS-SSP=. What happens to the smartnet? From all the reading i've done, we need to add SU1 type support for the Sensor license...

Search for a particular signature

We have gotten an email alert about an instance of TrojanSpy:Win32/Bancos on two different machines. How do I find if this signature exists and is enabled?

Resolved! 5520 ASA, create subinterfaces or use available physical interface?

I need to divide part of my network using VLANs and give a department a segmented internet connection. I was thinking about creating subinterfaces on my 5520 but have never configured these before and the firewall is so complex right now I don't feel...

Cisco asa 5525-x firewal Management interface

Hi guys please I need some help on asa 5525-x management interface, I changed the ASA default management ip address of 192.168.1.1 to an IP address that was NATed through a router from another subnet.I was able to ping the replacement IP ...

Resolved! Unknown PKI Command

Hello,I have been unsuccessful googling for a good understanding what this command does: validation-usage ssl-clientIt is configured under the "crypto ca trustpoint" command in our ASA, like for example:crypto ca trustpoint XXXX validation-usage ss...

Resolved! Etherchannel support for ASA 5585X

Hi there , Just trying to find out which all versions of ASA 5585X can support etherchannel features .ThanksPrabs

Resolved! difference in ASA module, ASA 5510

Folks,I am trying to get some comparison good data on the Cisco ASA(5585 probably) module and the Cisco 5510 physical device.We are looking to create contexts and most of these contexts are dynamic in nature. What could be the advantages and disadvan...

Unable to connect to ASA 5505 console port

Hi All, I am trying to configure an ASA 5505 firewall. I am unable to connect to the console port. Could someone help me on this issue? I tired conencting through the serial port connected to my laptop, It's running windows 7 OS and i downloaded Putt...

Cisco PIX 515e Problem

I am having a problem with our Cisco PIX 515e Firewall, in terms of allowing access to windows updates outside our domain. Here is the scenario:All the PCs have access to the Internet, but none of them can access the windows updates site to download ...

CSM Custom Reports

HiI am looking for a possibility to generate Reports telling me Who, When and how long VPN User were connected to a specific ASA or Tunnel Group.Currently I am using the Juniper STRM 2500 but want to replace the device with maybe the cisco secure man...

Resolved! ASA - Transparent failover pair without STP possible?

Hello,I’m trying to see if it is possible to introduce two transparent ASA 5520s in an Active/Standby pair between 2 switches that don't currently run any form of STP.Does anyone know if this is a supported configuration? I’m aware that if both ASA u...

Resolved! Allowing PPTP connection through a Cisco 877 ADSL Router

I have just setup my first Cisco ADSL router, I have decided to setup the firewall with the Zone wizard. This is for a guest network and everything works fine except guest users are unable to connect to external to their remote sites via a Microsoft ...

Resolved! Please tell me part numbers for ASA and VPN licence order

Hi allI wish to order a ASA 5515-X firewall with 250 vpn ssl licences plus the licences for mobile devicesCan anyone tell me the part numebers for this ?cheersCarl

Exclude 1 host (IP Address) from VPN Tunnel

Hi Experts,May I ask your help on this? Current setup:L2L VPN between site1 and site2[site1]--------------------[internet]-------------------[site2]10.0.100.0/24-----------------------------10.0.1.0/24Planned setup:L2L VPN between site1 and site2[sit...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Resolved! how to create an rule with action to subtract from the event log of Ips manager express console?

IPS license for ASA5525

Search for a particular signature

Resolved! 5520 ASA, create subinterfaces or use available physical interface?

Cisco asa 5525-x firewal Management interface

Resolved! Unknown PKI Command

Resolved! Etherchannel support for ASA 5585X

Resolved! difference in ASA module, ASA 5510

Unable to connect to ASA 5505 console port

Cisco PIX 515e Problem

CSM Custom Reports

Resolved! ASA - Transparent failover pair without STP possible?

Resolved! Allowing PPTP connection through a Cisco 877 ADSL Router

Resolved! Please tell me part numbers for ASA and VPN licence order

Exclude 1 host (IP Address) from VPN Tunnel

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Ansible with FTD_FMC 7.6

Cisco FTD workaround for SSE connector failure stumbled on rights priv

Assigning an EtherChannel Subinterface to an Instance via FMC API

FirePower onboarding to FMC first policy deployment failure

Questions around Dynamic Attributes Connector - FMC integrated

FTD not backing up config to remote server

Factory-reset FTD 1120 "application installation failed. Launching.."

IPSec VPN between C.2811 and Firepower with only Real IP addresses