Network Security

A thread on these boards: A reporter states that both ASA interfaces have same security level of 100. The solution was..."You are missing NAT statements between inside and LANDHP. Please configure identity NAT between the interfaces:static (inside,LA...

 current 5545X versionasa984-41-smp-k8.binwould i be better upgrading to asa984-48-smp-k8.bin which is a jump of 5 versions, is this the safest way, or could i jump straight to asa992-85-smp-k8.bin,or even to asa9-10-1-44-smp-k8.bin, then keep jumpin...

Hello.I performed a task as instructed by my senior, to reboot the primary ASA-5525 (9.14(3)), then when it returned online, to reboot the secondary. At the beginning, I believe I did execute "failover active", but I am not certain because I remember...

Hello,We have a scheduled weekly task to backup our FMC  and FTD Device configs to a remote storage location and have a policy threshold set to 70% of disk.  Currently, there are 13 backups listed in the FMC and 99 backups for our FTDs.  Is there not...

Hello."packet-tracer input inside icmp 172.16.1.5 8 0 172.16.8.5 detailed"What is the meaning of 8 0"?(I don't understand it from the reference below.)Thank you!Cisco Secure Firewall ASA Series Command Reference, I - R Commands - pa - pn [Cisco Secur...

Hi This post is following the below link. The question is after changing TLS version, the security vulnerability report is same as before, meaning the change did not remediate the issue. Even if the http and https were disabled, the issue is still ex...

SERVER1 (security zone 50 of dmz) ==>  ASA-5525 ==> inside network (security zone 100) ==> ISR-router ===> www SERVER2Server1 initiates the connection to server2. Obviously there is return traffic to Server1.Regarding only ASA-5525, how many differen...

Hello."object network SERVER1nat (dmz,Outside) static 1.1.1.1"If the connection is initiated from the Outside to the DMZ , and the Outside ACL allows this traffic, will this circuit connect, or will it fail because there is needed an additional NAT r...

Hello, I have a rule setup on my FMC from my exchange servers to my smtp gateway with smtp/smtps/ping as destination ports, logging enabled and allow action.On the connection > events logs, i see all trafic coming from exchange servers to my smtp gat...

Hi Everyone,So.. i have an ACL with a number of rules <30 defined on an ASA running 9.12.4xthe last ACL in this rulebase is an 'ip any any' allow and i want to remove and tighten this up.. but i first need to determine what traffic is allowed on this...

Hi, I've been asked to take advantage of an upcoming plant outage to do some firmware updates on an active/standby pair of ASA5516 protecting an ICS/OT network.   These firewalls  are currently running ASA 9.10(1)22, ASDM 7.10(1), and have FXOS 2.4(1...