Network Security

Is the output of the "show nat" command, which shows the number of thits on NAT rules, a reliable counter in the same way that access-list counters are, meaning unless cleared or if the firewall is rebooted, can I count on these hit counts as being a...

How can I tell if may ASA 5525-X supports the following:hmac-sha2-256hmac-sha2-384hmac-sha2-512and if it does how do I enable it. My software ver is : Cisco Adaptive Security Appliance Software Version 9.7(1)24

Hello, I am configuring a new tunnel between a Cisco ASA and Azure but phase2 is not establised (whil hase 1 is UP-IDLE): B25FW0101# show crypto ipsec saThere are no ipsec sas When I ran a debug I got the following output: B25FW0101# IPSEC(crypto_map...

When applied this nat exclusion on my local ASA I am able to ping all my local network from my remote network but not my inside interface in my local ASA, when I disable this nat exclusion I am able to do it. Why this happen?. I have enable the manag...

Hello, I've one Cisco ASA 5500 firewall. It is feasible to use NAT T config in one tunnel and disable it in another tunnel using the same firewall. Thank you,Sebin

Hi Guys   I need to allow the urls found on https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges But in firepower rule set the applications "Office 365, Exchange Online, Microsoft" doesn't all the URLs? Any way to cover th...

Dear Team, I have new cisco firepower 2120 asa and i can acess https and asdm via default management port and IP address(192.168.45.1)I have set inside interface address with address 10.x.x.x and allow https/asdm but cannot access via this interface,...

To transfer an existing license for an RMA: ​Step 1: Login to the License Registration PortalStep 2: From the Manage menu select “Devices”Step 3: Select “Filters” and enter the license key of the DC in “Devive/Product Instance ID” and click applyStep...

i have an older ASA5525 (non-X) with 8MB RAM, and just 2 interfaces working as a small DMZ for a few dozen devices.   one thing that has been bothering me for some time is when almost nothing happening -- and a single host on the other side of the FW...

I'll try to keep a simple as possible - HO has the ability to go through 2 different ISP, ISP1 original and ISP2 new -  HO was recently moved over to ISP2, only HO goes through ISP2 - all other location go through ISP1 over MPLS. Problem, one of the ...