Network Security

Hello Team,Is there any script or CLI command to check how much memory particular access list consumes ? There are ACLs which are consuming high memory on the firewall and we need to search those rules. Cisco Firepower 2110 Threat Defense 

So I entered the following to more harden the device but now I get "Unable to launch ASDM from ..." error.Does anyone know what the workaround is so I can keep these same versions?I entered:asa(config)# ssl server-version tlsv1.2asa(config)# ssl clie...

Hi everyone, i am unable to enter in Rommon mode in ASA 5508-x because of password recovery functionality is disabled .kindly help me out

So our Primary firewall failed and our Secondary ASA is our active unit.  We just received our replacement ASA.  I just want to verify these are the steps to introduce the Primary ASA back into the HA setup.   Currently, our Secondary unit (Active un...

ciscoasa# show run: Saved:: : Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz:ASA Version 9.2(4)27!hostname ciscoasainterface Ethernet0/0description to externalswitchport access vlan 2!interface Ethernet0/1description to internal!interface Ethernet0...

Can anyone point to a python sample script where this can be achieved? or at least part of it, just need something to get me started.Via the CLI on the ASA there are multiple ways to go about it. I usually do:1 - sh access-list <name> | I 1.2.3.42 - ...

hi,quick question, does the IP address for doing dynamic PAT has to be in the same subnet as the ASA "outside" interface?see sample below. we control the routing for the "outside" network which integrates with a partner network. interface GigabitEthe...

Hi,our customer have to install in our infrastructure 2 server and 2 switch L2. Their switch should connect to our switch L2/L3SoCustomer Server-->Customer Layer2 Switch-->ISP L2/L3 switch-->ISP RouterOn ISP L2/L3 switch we configure vlan and we have...

Hi all, We have an IR809G running EZVPN. Everything has worked fine on it for some time now but we are trying to add an IP interface to G0. This would be the first thing that has physically configured to connect to it. They have been used to monitor ...

HI Guys  I am facing issues performing the fail over in ASA 5525 ,I need to reboot my Primary firewall which is active. I did a #failover active in my secondary/standby firewall . what happened is when i logged in my primary FW  and did a show failov...

With the new firepower family firewalls/IPS  , do they support IDS functionality in passive mode , where traffic does not need to traverse the firewall ?

When a Cisco Workload Optimization Manager (CWOM) license key is sent, what is the email address of the sender and/or subject line in the email?

Hi GuysI am a beginner at FTD and i have a basic question about how to make logging to any rulei just want to show the log of traffic to know if the traffic pass through this rule or noti searched about it . but i can`t find a simple steps after crea...