Network Security

Access-List help required

Hi I need some help in creating that ACL on Cisco multilayer switch. 1) I want to allow all traffic between these subnets10.75.0.0/22 ------ 10.0.0.0/8 2)) I want to allow only http traffic and block the remaining traffic between the following subnet...

CISCO ASR Firewall Session table protection

Hello, I would like to protect our ASR router (connected to the ISP and the internal network) from Firewall session table flood attacks by configuring Firewall Session table protection. One of the restrictions I found here is https://contenthub.cisco...

Resolved! ASA - LAN dont recieve internet - possible NAT issue

HelloPlease here iam running with my ASA5606-x Firepower. Unfortunatly me LAN side arnt possible to reach the (ISP) Internet. Ping inside the LAN are possible also ping the firewall are ok. i think the configuration are mede simple g1/1 WAN - Outside...

AnyConnect disconnects network connection at when I connect to the client

I just setup a new ASAv in Azure and was testing AnyConnect. I can login find but once the connection is established, it disconnects my network connection. I thought maybe it was just my computer so I had someone else try it and the same thing happen...

How to use a VPN alternative connection as management path

Hi all,Some weeks ago I got help in this community regarding a management access configuration for my ASA and I got advise from @Marius Gunnerud which I'm trying to follow here. I got an ASA 5508, connected to AWS cloud via AWS direct connect, whic...

Resolved! Does Snort have the ability to detect transfer of sensitive information?

Wondering if Snort (running on our FTD appliances) has the ability to detect transfers of personal information such as credit card info or social security numbers, etc.

Resolved! ASA Routing from outside to sub-interfaces

I am adding a new ASA for a new segment on the network. the current existing network (10.10.0.0/16) should be able to access this Test segment. Here is my scenario: switch(L2)---trunk----ASA----L3link----ExistingL3Switch(with 10.10.0.0/16) on ASA I...

Catalyst 2960 Config for Wireshark Capture

Hi. I'm the network admin for my organization and we've been having some security issues on our network recently so I'm trying to investigate using wireshark. But my issue is that wireshark only captures packets that come to my device's network inter...

FPMC permanently high read on sda /var

Hello,we use an FMC (vmware Version 6.6.0.1).I've noticed that sda7 (/var) has consistently high read rates. Between 250 and 300 MB/s. Is that normal? Which process is responsible for this and how can I determine which process it is?Thanks for the he...

ASA 5505 - Input Errors

Hello everyone, I am happy that I joined this community. I know that this is the best place to learn and help people, but at this moment I need some help because it's very urgent. I have 2 ASA 5505 connected by an interface. The interface is to ensur...

RV345

Hi there, for my RV345 VPN router I would like to getCisco Umbrella license (to prevent Ddso attack)AnyConnect license for VPN (remote employees)Could you please let me know which license should I choose, there is a lot of different license with dif...

Resolved! What ASDM version is compatible with ASA software version asa984-32-smp-k8.bin

Hi Cisco Experts, I have a 5525-X and would like to upgrade it to 9.8.4 interim release.. Just wanted to know if what would be the compatible ASDM version. I've looked from this compatibility list but I can't seem find the ASDM version that will wo...

CSM 4.22 SP1 Installation not finishing

Hello I upgraded CSM to 4.22 and I tested it is working I then installed the SP1. The setup run and I pressed Done. The thing s that the processes are still running after quite some time. And when i try to open the manager the version is 4.22. Haw...

Resolved! Policy based Routing via IPSEC VPN (Policy based)

Hi All, I have a Cisco ASA 5516-X 9.6 pair on HA .Inside 1 VLAN 100 10.10.10.0/24 -Prodinside 2 VLAN 200 20.20.20.0/24 - DevCommunication to a networks 30.30.30.0/24 & 40.40.40.0/24 in another DC is via MPLSNow there is a DR planned wherein we will h...

WCCP Redirection on FTD 2130

Hello All,Has anyone configured transparent WCCP redirection on Cisco FTD managed by FMC?I need to migrate this ASA WCCP configuration to FTD Flexconfigwccp web-cachewccp 70wccp 80wccp 90wccp 91wccp 93 redirect-list WCCP-FORWARD group-list wccp-serv...

Network Security

Forum Posts

Access-List help required

CISCO ASR Firewall Session table protection

Resolved! ASA - LAN dont recieve internet - possible NAT issue

AnyConnect disconnects network connection at when I connect to the client

How to use a VPN alternative connection as management path

Resolved! Does Snort have the ability to detect transfer of sensitive information?

Resolved! ASA Routing from outside to sub-interfaces

Catalyst 2960 Config for Wireshark Capture

FPMC permanently high read on sda /var

ASA 5505 - Input Errors

RV345

Resolved! What ASDM version is compatible with ASA software version asa984-32-smp-k8.bin

CSM 4.22 SP1 Installation not finishing

Resolved! Policy based Routing via IPSEC VPN (Policy based)

WCCP Redirection on FTD 2130

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Change IP address of FMC HA standby node

FTD Multi-Instance Data and Data-Sharing Interface

Firepower integration with Openldap

Adding Clustered node in SNMP manager gives error duplicate name

loug user out by himself

Internal Server Error and Certificate key usage inadequate for attempt

Where to migrate SFR redirect rules on FTD appliance

ASA 9.6 Global Inspect Policy

How to deploy Cisco Firepower Management Center?

Cisco FTD send RST when dropped by Snort / IPS