Network Security

Its been bothering me for a while now. The flow charts on all Cisco documents show that 'VPN Decrypt' happens after checking for 'Existing Connections'. (see attached flow chart). My question is, how will FTD know whether the connection is existing o...

Can someone help me on this? what command line should I use in the head office firewall? thanks

I have working, Site 2 Site VPN between 2 location and ASA1 is managed by me.The ACL at ASA1 in inside interface is from source 192.168.1.1 to dstn 172.168.1.1 at port 3389 .I want to know in which interface the ACL has been applied on ASA 2 if it is...

I have a new Firepower 1120 that is working today after some help from members of the community.  I have found that all of my Windows systems running IPv4 have proper DNS records and can access URLs on the outside.  But any device that is IPv6 does n...

I tried to create OSPF neighbors between Inside and dmz.As below topology, ASAv g0/1 connected to inside_2, g0/2 connected to dmzASAv g0/1 7.7.2.254/24ASAv g0/2 192.168.244.254/24Inside_2       e0/0 7.7.2.1/24， lo0 2.2.2.2/24dmz             e0/0 192....

Hi All I've an ASR1002 which NAT some traffic.Since I check the translation table , some lines dont show anything about protocol and instead show "---" so too about outside local and global.(The red part in picture)Anyone knows what the story is ?Exp...

I'm sure you all are familiar with the CIS controls. We've had a couple issues tied with (I think) one of the changes, and one we can't get resolved. I believe the issue comes from "password encryption aes." We initially deployed the changes to 3 fir...

We have a Cisco firewall that can be accessed through the web interface called Firepower. I  discovered that there is a geolocation rule that blocks visitors from South Africa. The issue is that we recently got a student from there that cannot visit ...

Hi, The Pix 501 that has been in place for quite some time acting as a firewall between two LANs LANA - ip address outside 192.168.45.241 255.255.255.0LANB - ip address inside 192.168.44.240 255.255.255.0 This config has worked ok as devices in each ...

Hi everyone. I planing to migrate my Prefilter rules to ACP, the only reason I'm not doing yet that work is because actually have 700 line of rules.. Is any way to migrate prefilter to ACP using some script ?   Regards.

Hi there,i have configured cisco asa firewall properly and configured http server and IP's as well properly,but when i am trying to access the url in browser to install the asdm its not opening this url ... the error is attached.also i am pasting the...

Someone else had setup the AD user account for our realm in FMC.  Does the user need to be set as a domain admin or can it be a normal user account? I'd think that it doesn't need to be a domain admin, but, wanted to get some guidance. Thanks!