Network Security

Engage with peers and experts on network security topics such as FTD, FMC, FDM, CDO and ASA.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

“Join

 
Labels

Forum Posts

Howdy all,So we are implementing a pair of 5510's and we want to do so using active/active. We also want to utilize the newest code ie 9.1(1). In reading about Active/Active, I am somewhat confused as it sounds like said mode should more acurately be...

I don't have an ASA to test at the moment so I have to ask experts in this forum:A friend of mine manages a Checkpoint firewall and in the security policy, there is a rule that says "any source from the Internet hitting a web server sitting the check...

ASA#                                                                                (this is system context)context context  allocate-interface Port-channel2.1 INSIDE  config-url disk0:/configs/context.cfg  join-failover-group 1i get following error ...

gavin han by Level 1
  • 757 Views
  • 2 replies
  • 0 Helpful votes

Hello!I have a 2801 that I am using ZBFW on and having issue getting DHCP. My policies are very simple, inspect from insidezone to outside and inspect on ports from outside to insidezone (for my port forwards). With no self zone policies in place I c...

hi,anyone knows why policy routing to a next hop ip address is not supported in asa ? will it be soon ? (i can only use route map with ospf metrics, there is no ip next hop command)Thank you

josephium by Level 1
  • 785 Views
  • 5 replies
  • 0 Helpful votes

Hello folks -I am confiuring ZFW on a Cisco 2951 Router. The router has the following interfaces:TypeIP AddressUsePort Channel 1.510.218.4.197/30RTR-SW-Inband-MGMT VLANPort Channel 1.1010.218.4.1/26User VLANPort Channel 1.1510.218.4.65/26DB/Servers V...

Hello,I'm going to upgrade our ASA5525-X to the new 9.1(1) software which should support new ASA CX.Has anyone tried new version of software with Context-Aware? Do I need to buy licence to enable CX?Thanks and have a good day!

rustamovea by Level 1
  • 3489 Views
  • 13 replies
  • 0 Helpful votes

I have an ASA configured with a server in our DMZ.It is currently configured to be accessed via the internet on port 80.  That works.Now they want to initiate traffic from the DMZ to the internet.  I thought the static NAT would keep the IP.  Its act...

Review Cisco Networking for a $25 gift card