Network Security

I am trying to figure out the best way to set this up on an ASA (9.6).We want 10.0.1.0 to go out ISP1 unless it fails, then choose ISP2.We want 10.0.2.0 to go out ISP2 unless it fails, then choose ISP1.(This is for simplicity there are several networ...

I configured the zone based firewall and the rules seem to work fine. However, the speeds are really bad. Even when just using pass actions it only reaches 1.5 Gbit/s (with the firewall turned off it reaches 9-10 Gbit/s).This even happens with very m...

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191112-asa-ftd-lua-rce?emailclick=CNSemail It stated:  A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA)...

Hi Experts,We've a requirement of rules to be allowed for penetration testing from Outside Public IP to scan all entire Internal networks on port 'any'.Typically, we've seen PAT from Inside to Outside, is there any configuration  to be done to accomp...

Hi,I`m having FMC 6.2.3 virtual and two FTDs 4100 configured in HA.I can not deploy my configuration (policy rules) on both FTD.I'm getting deployment failed on FTDs HA as error message.Please refer to that picture attached.I really need help guys pl...

Hi ,please I totaly confused about the EOL date of NGFW ASA5545-X series would you please confrim the date of EOS ,EOL it is not clear in cisco site

Hi All,          we have a site-site connection with azure with BGP enabled. I am trying to force tunnel all the traffic from azure to our ASA. However even though the site-site vpn is working fine. I am not able to make this work however I know its ...

Hi,we have oberved that ASA is not authorized after reboot with no internet. The ASA is successfully initial registered and authorized License Usage==============Firepower 2100 ASA Standard (FIREPOWER_2100_ASA_STANDARD):Description: Firepower 2100 AS...

Is "AnyConnect Secure Mobility Client" open source?

Attached is the current infra but we're getting attacked with several ports I tried to set an access list but when I set the configuration there's no hitcount when I show run the access-list. something is not right even the access-list OUT_IN extende...

Hi guys, One of our customers has a virtual FMC running on VMWare. I had assumed that the best method for backing up the FMC would be to take VMWare snapshots. However, I've just read this: https://www.cisco.com/c/en/us/td/docs/security/firepower/qui...

Dear Cisco Community,  There is a report, alert, notification or other. To inform me immediately via email, about massive access to a website during the day. for example, in black Friday- if more than 20 people connect to the same page in less than 5...

 when i deploy my FTD appliance inline (running on a 4120 chassis) my backups (from a windows server to EMC data domain appliance) slow down dramatically the source and destination are in different subnet and traffic passes thru the firepower. when i...