Network Security

Here are some ACLs on my switch , but some of them are useless  I want to clear them up ,but I'm not sure which one is useless , when I show access-list I can see some are match ！ I just want to make sure is there any better way to do that ? or Is th...

I was able to import a PKI trustpoint using the crypto pki trustpool import terminal command and copy and paste the pem file. However, when I try to import the same file from flash:. I get an error: (config)#crypto pki trustpool import url flash:myce...

Hello,we have a strange problem with an ASA5510:After an update to version 9.1.7 all ports are down.What we have done exactly:We were on version 8.3, first updated to version 9.0 and then to 9.1.7. After that everything was ok.After that we had to re...

Hello guys, i am facing an issue during migration of ASA into Firepower. I was able to install the boot image but during installation of the system software i met this problem. Starting upgrade process ...Populating new system imageUpgrade failed for...

Hi All,  I seem to be having configuration problems accessing the ASA on the above services from the Internet. When running a traceroute I am unable to see all hopsTracing route to one.one.one.one [1.1.1.1]over a maximum of 30 hops:1 * * * Request ti...

 Hi Team, Does FTD Image support Active/ Active High Availability ? Thanks,Akshatha

We are rolling out a Microsoft 2016 VPN Server to replace our Cisco AnyConnect (various reasons why).The issue we are hitting is that PPTP and SSTP VPNs connect with no issue, but we want to use L2TP which isnt hitting the server.We believe the ASA i...

I need to do a packet capture on the CCL traffic to find out the source/destination of the packets that still using the CCL links.Does the ASA encrypt all CCL traffic? If I SPAN the CCL link (connected to a Nexus Switch) and connect a laptop running ...

I have the internal web server 10.xx4 and NAT to the internet with the publix IP 103.xxx, how can the internal user network of the 10.xxx network access the web site through the public IP 103.xxx not over internal IP? Thank !