Network Security

Hello Guys, Need help on troubleshooting the ssh from outside(WAN) interface, I attached the config below. Please advice with commands for troubleshooting. Thanks, Result of the command: "sh run": SavedResult of the command: "sh run": Saved:ASA Versi...

Currently in our environment we have ~100 ASA's that are all being backed up through Solarwinds: NCM. Within NCM we use a TACACS+ account that acts as a service account to access these devices, and the backups are pulled nightly, and saved.  There wa...

I was wondering if anyone had a breakout of each vulnerability to command CLI or ASDM to prove that the ASA meets or can meet the check?   Note: to view the STIG you can go to https://iase.disa.mil and download STIGviewer 2.8 to read the STIG.   Than...

Hello Everyone... We are running ASA 5545X  with 9.14 / 7.14. Under Configuration>Site-to-Site VPN>Advanced>Tunnel Groups We are getting a strange name of a Tunnel Group : "0.0.0.2"Nowhere in our configuration does it call out for it and it appears t...

Hello, We have around 150 Cisco ASA 5505 deployed in the field and we are currently in the process of upgrading our infrastructure. Currently, we have an RSA key used for authentication purposes on the ASA. Does Cisco ASA 5505 support using ecdsa key...

I wish to have your opinion on the configuration of my ASA cluster.because I am doing a failover, I have servers from the 152.28.0.0/16 server which can no longer reach the internet and also the servers from the DMZ 172.16.1.0/24 lan.At the ASA confi...

What's the best way to configure static active/passive MAC address for a failover pair? Asking, because there are basically two ways:1) Under FTD interface configuration -> Advanced -. Active/Standby Mac address.It is then being applied like this dur...

Could anyone please help as while enabling the PBR on Cisco ASA, not getting the trace result from other direction.I have set all the parameters like "set connection decrement-ttl" and allowed IP any any for testing on Firewall.Below is the Topology:...

 Hi ,How can I clear arp for one  entry  in asa 5585  instead of all interface  Thanks  

 We have Cisco ASA and IOS is Post 8.4I have a few internal systems and servers (see created object group below) called our "user acceptance testing" (UAT) environment (security level 50). They will need access to a publicly accessible FTPS (ftp over...

Hello, We are using FPR-9300 w/ FMC 4600, both FMC and FTD running the 6.6.0 version image. We are getting the following error, while adding new rules:"Rule validation failed due to insufficient resources causing deployment failure. Please consider r...