Hello We are on anyconnect 4.9 and ASA 5516. When users are connected to VPN using anyconnect, we want to maintain split tunneling and deny access to their local Lan (or access to corporate laptop from local lan), is this possible?
Forum Posts
How recognized is this associate certification in getting jobs in cyber security firms that use vendor neutral or open-source products?
I wanted to extract the name of the links from this URL https://www.ccexpert.us/ccda/best-practices-for-hierarchical-layers.html-wigs-date however, I can't move on to the next step. below is my code so farimport requests as re from bs4 import Beautif...
Resolved! ASA Failover
I have 2 asas. ASA-A and ASA-B. I want to configure ASA-B as an active unit and ASA-A as an standby unit. Could any one tell me how could i do that? IS there any election process will happen for selecting active/standby units between asa?
I am unsure of how I need to erase all the configurations then reload them. I am also unsure of how ACL needs to be added on. Attached are the packet tracer and the Word Document that has the instructions. Any tips or hints are really helpful. Also ...
Hello, I have a FTD 1010 that is not able to determine what tenancy it should fall within upon registration with Smart Licensing. I can see the device as registered and licensing applied but this error persist. The device is running 7.0.1. I also not...
I have a Cisco FTD managed by FDM, when setting up Remote Access VPN I can only select one outside interface from Global Settings, I have two ISPs and I want to publish the VPN on both outside interfaces, is this even possible with FTD? I'm really st...
Resolved! ASA 9.5 dhcp reservation
hi , my dhcp is on ASA5506, and the os ver is 9.5, I want to bing a static IP to a MAC address in dhcp.can I ? how? thanks
Resolved! Hoe to get cisco ASAv demo license
Guys I am running cisco asav unlicensed but it is restricted to 100 Kbps. Please help me with the procedure to get demo license for it.
How can i find the object-group or object-groups an ip address belongs to/is part of in an ASA running conf ?eg. sh run | i ip address or sh run object-group | i <ip add> gives me the below outputnetwork-object <ip add>network-object <ip add>network...
Hi Guys, I am trying to build firewall rules based from the data collected from our Syslog servers. Problem is our firewall ASA 5516-X is unable to display the catch all rules in our syslog. We usually filter the Catch All logs (permit IP any any) us...
Hi, I would like identify each node that is sending out syslog. Currently the FMC is configured in the Device platform to use the hostname.I've read the following in a number of Cluster documents :- "If you configure logging to use the local-node nam...
When we enable FIPS on our Nexus 93180LC-EX after reload we are unable to SSH into the box. We have to console into the box and remove the FIPS command in order to get back into the box via SSH. Has anyone else experienced this issue before? Are we...
I got below vulnerability in one of the FTD 2110 configured as Transparent Firewall Vulnerability :: SSH Server CBC Mode Ciphers Enabled. The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to re...
Hello our switch Cisco WS-C2960L-SM-24PS has this vulnerability and the recommended solution to this is to obtain new SHA-2 signed SSL/TLS certificates to avoid web browser SSL/TLS certificate warnings. Can you please guide me on how to do this or su...
