Network Security

Hi guysI have come up with a solution to get my Corporate traffic into Azure by way of a VPN, which will terminate on a HA pair of ASAv firewalls. I need to protect an HTTPS flow within the tunnel and have it decrypted on the ASAv.The flow would be o...

I have an ASA 5515-x and added module ASA-IC-6GE-SFP-A. From the CLI, the interface is showing as GigabitEthernet1/0, and when I enter the command "media-type SFP," it says invalid input. The ASA has an SFP connector, which is up and running. Is ther...

A thread on these boards: A reporter states that both ASA interfaces have same security level of 100. The solution was..."You are missing NAT statements between inside and LANDHP. Please configure identity NAT between the interfaces:static (inside,LA...

 current 5545X versionasa984-41-smp-k8.binwould i be better upgrading to asa984-48-smp-k8.bin which is a jump of 5 versions, is this the safest way, or could i jump straight to asa992-85-smp-k8.bin,or even to asa9-10-1-44-smp-k8.bin, then keep jumpin...

Hello.I performed a task as instructed by my senior, to reboot the primary ASA-5525 (9.14(3)), then when it returned online, to reboot the secondary. At the beginning, I believe I did execute "failover active", but I am not certain because I remember...

Hello,We have a scheduled weekly task to backup our FMC  and FTD Device configs to a remote storage location and have a policy threshold set to 70% of disk.  Currently, there are 13 backups listed in the FMC and 99 backups for our FTDs.  Is there not...

Hello."packet-tracer input inside icmp 172.16.1.5 8 0 172.16.8.5 detailed"What is the meaning of 8 0"?(I don't understand it from the reference below.)Thank you!Cisco Secure Firewall ASA Series Command Reference, I - R Commands - pa - pn [Cisco Secur...

Hi This post is following the below link. The question is after changing TLS version, the security vulnerability report is same as before, meaning the change did not remediate the issue. Even if the http and https were disabled, the issue is still ex...

SERVER1 (security zone 50 of dmz) ==>  ASA-5525 ==> inside network (security zone 100) ==> ISR-router ===> www SERVER2Server1 initiates the connection to server2. Obviously there is return traffic to Server1.Regarding only ASA-5525, how many differen...

Hello."object network SERVER1nat (dmz,Outside) static 1.1.1.1"If the connection is initiated from the Outside to the DMZ , and the Outside ACL allows this traffic, will this circuit connect, or will it fail because there is needed an additional NAT r...

Hello, I have a rule setup on my FMC from my exchange servers to my smtp gateway with smtp/smtps/ping as destination ports, logging enabled and allow action.On the connection > events logs, i see all trafic coming from exchange servers to my smtp gat...