Network Security

All We are experiencing catastophic weirdness with failover between Pri/Sec. While on Pri, the "no failover" command was run.    I lost connectivity to Primary    Internet connectivity was lost. I think this was because Prim/Sec both thought they sho...

Anyone had issues after upgrading to 6.5 when using URL reputation filtering.  Pre 6.5 - It was using Brightcloud and now uses Talos.  Some websites are coming back with a "blank" reputation but in 6.4 it showed "neutral".  Screenshot attached.   

Dear Friends,I am new to PPPoE configuration and hence this query. We currently have an IPSec S2S VPN built between SiteA and SiteB. So, the ISP at SITE B is now providing us with a PPPoE connection. They provided us a router with a Public IP and als...

Hello, We upgraded FMC from 6.2.3 to 6.4.0.8. After this upgrade, we started to create prefilter rule (no one prefilter rule before). Under 'Port' tab, the available port section stays in Loading state. I don't see this behavior under ACP rules. Anyo...

Dear Experts & Noobs,  Can anyone explain what happens when the FTD licenses expire. The types of licenses available are Base, Malware, Threat, Anyconnect Apex (I have an idea on how URL filtering will be impacted given that the updates needs to be d...

Hi,I´ve changed an ASA5520 Cluster with two ASA 5525-X and the configuration was copiedfrom the old two the new cluster. Behind the cluster is our network MGMT vlanand we build SSH connections to network Devices (Switches, Router etc.). With the old ...

Hello My ISP gave me /28 Public IP, what I want to do is creating 4 site to site VPN connections with 4 remote sites My question is How I can use one IP per each VPN connection instead of using the same IP address Or How can I create multiple outside...

Hi, I am using ASA version 9.13 and have a scenario to allow communication where traffic has to go in and out through same interface.Example(taking random ips)We have a private range 172.16.1.0/24 behind firewall, where 172.16.1.2 is web server ip an...

Hi Team,I am getting an error message on the ASA indicating that the ASA is not able to obtain the software version of the IPS module that is connected to the ASA. However the problem here is that the ASA does not have an IPS connected to it. Below i...

We have a Cisco ASA 5510 configured as a VPN server for our users connecting with their AnyConnect clients. How can we configure logging to the buffer when someone connects to or disconnects from the VPN? Unfortunately we don't have a syslog server s...

Dear All, Please I need help on how to migrate FirePower Control, Protection, Malware and url filter license added via ASDM to FMC. The device is currently being  manage by ASDM but we have  move it  to FMC but the device is showing that there no lic...

Hello! I've a pair of ASA5585 running some dated version 9.2(3)4 . It's a failover cluster and we use interface monitoring. I wondered that on secondary one monitored interface was in state "Normal (Waiting)". I did an ICMP packet trace and found thi...

Hello, I have a C2911 with IOS Version 15.2 (4) M5, and I want to configure a VPN with AES-256-GCM encryption, but it does not appear in the configuration menu. 2029_BRivadavia_FD_1 (config-ikev2-proposition) #encryption? 3des 3DES aes-cbc-128 AES-CB...

We have been receiving some AAA failure login attempts from external IPs.  Both SSH and HTTPS to the outside interface is restricted to an external IP owned by myself so I cant work out how this could be the case. ASA version is 9.10