Network Security

I am looking at the "Peak in Use" and "All in Use" numbers of our AnyConnect Mobile users on our ASA and it doesn't appear to be correct.  This is what I see: show vpn-sessiondb license-summary sum -su -------------------------------------------...

Hi Guys,Hope all are okay.I am tasked to migrate our firewall from ASA to a non-Cisco firewall and it includes firewall clean up. I would to ask in an ASA standpoint, what are the strategies for the engineer to determine duplicates and non-used polic...

Hello bros, I have issued when allowing users connecting to MS defender . because our asa 5520 not support url like . *.microsoft.com.  So may i have use url www.microsoft.com instead of . ? did you have ever do like that. I hope hearing souds good f...

Hi all I had NAT question. As can seen on the attached topology, it is mandate to do NAT policy on both firewall. (Due to some mandate policy setup)I would like to askquestion 1: As bubble 1 showing, how traffic from DMZ can SSH to the real machine? ...

Dear all, I'm writing you regarding a big headache I have with a active/passive ASA 5510 cluster. Both have been updated to their latest version ( 9.1.7 ). Since 4/5 months now, we have complaints from users as their IP phone reboot nearly 5 to 6 tim...

I have a small test topology with LAN and DMZ network. My LAN network have ospf network and my DMZ have Rip network. I have redistribute my static route (pointing to internet) into Rip and OSPF, I can see the redistributed routed into RIP but not in ...

I have a Firepower 2100 (Firewall A) with logical ASA image with a default route pointed towards management interface..i have 2 more subinterface on the same firewall..one is Inside and the other points towards Firewall B.. i want to integrate Firewa...

We have FTD-A as a VPN firewall that authenticates remote users against LDAP and assigns IP addresses. What we are trying to achieve is a user-based policy applied on FTD-B, but we are having problems identifying users when they are connected to VPN....

Hello, I'm trying to add a backup ISP to my Firepower firewall managed through FMC. I have options for Frequency, Timeout, and Threshold, but I don't see any options in either the SLA or the Tracked route for a delay. How would I set the amount of ti...

Hello Experts, Existing FPR 9300 has below modules:- SM24 with ASA SW and on-board 8 x 10GE optical ports. Can we add 2 x SM56 and 2 x FPR9K-NM-4X40G to same FPR 9300 chassis? Will it support that much backplane bandwidth with 40G modules? How much f...

HelloI am facing an issue with SSH/HTTPS management access on a Firepower 4100.  After un-boxing the device, I consoled in and ran through the initial setup.  I assigned the IP, subnet, hostname, default gateway, and IP blocks on the interface.  I am...