Network Security

Hallo ,  I am tracing from outside to inside with the following config but am not able to trace it from outside, but it is working from inside-Outside.   class-map inspection_defaultmatch default-inspection-trafficclass-map TRACE-Cmatch port udp rang...

hi,i got a pair of ASA active-standby pair which failover didn't work or kick in over the holidays.the traffic was restored when manually forced a failover to secondary FW.failover link is via port-channel 1 and "data" ports are in a port-channel 15....

Hi, I have a device in my DMZ that needs to talk to my inside network server.  I can't telnet using the ports that I have listed in my access list. Packet tracer shows that the TCP traffic is not blocked from the inside to the DMZ1. packet-tracer inp...

I'm working with Ansible 2.9 and when I try to run Ad-Hoc commands or plays I get errors stating my ssh ansible -m ios_ping -a "dest=10.88.2.21" testboxesSSH password:ys2021_b2046r301_test.srf.local | FAILED! => {"changed": false,"msg": "Connection t...

Hi All, I'm suffering form brain fade. I'm sure there is a setting for this on the FMC, but for the life of me I can't find it at the moment.It's running V7.0.1.Default is to block traffic, but we have an issue with Snort crapping out randomly and ex...

I'm looking at creating a restricted subnet. I want all nodes and devices on the subnet restricted from accessing each other. So for instance, node 1 can't speak to node 2 and so on. Is this possible?

Hi, I have to block internet navigation and windows update to several windows client, the problem is that they have a local CRM (in the same LAN). This CRM works on web and on login it has several components that goes on internet (like youtube or goo...

Hello everybody,a customer reported that AnyConnect users will be disconnected sporadicallyand will be prompted to login again but this time without success.When they retriy this he get a new VPN session.But the  ASA consider the session still active...

Good evening, a simple question.Is there a match between ports (UDP-TCP) and applications in the FMC?In the case of a policy configuration I would like to use applications instead of ports but I am in the situation of not being able to find any appli...