Network Security

I am newbie to the firewall config arena. I have an ASA 5510 that I have created a basic config for to access the internet. I am connecting to the firewall through the LAN and I am able to ping it and access the config via the ASDM. If I console in I...

Hello Experts, I would like to know: 1) What are the best practices while deploying Cisco Firepower (FTD / IPS) in standalone/ HA/ cluster? Sometimes it just look like the boxes can't handle traffic no matter the design (I may be wrong but we mostly ...

I am trying to block IKE traffic incoming to the ASA using ACL applied on control-plane but it doesn't seem to block those requests.Below is my config:object-group network IPSEC_TUNNEL_IP network-object host 1.2.3.4 network-object host 2.3.4.5 acc...

I need to remove one line of code in a Cisco 2811 router, without removing the entire ACL. I'm used to making these changes in firewalls, but have figured out it's a little different in the router. Can someone provide me with some instruction? I hear...

When filtering snort rules by Microsoft Vulnerabilities category the CVE numbers only go up to CVE-2017-022 ? Is this a bug or missing an update ?From the FMC Object>Intrusion Rules>Priority>server-webapp.rules (3818)>Rule Documentation (1:52130:1) f...

Hi,I am hardy consider to know that how would be possible to block some IPs in a network?shall I block the IPs using firewall, if I'm right how should I use with API?I'm new with this topic, but I will appreciate your answer to inform me.Thanks

 We have an asa 5512 with a 100Mb external line connected to port 1/1. Connected for internal we have 2 networks on 1/2 and 1/3. The issue we have is users keep maxing one of the networks restricting the other one. How can we limit interfaces 1/2 and...

I am trying to get one of my servers access to microsoft updates via the application filtering. However, I think that it is not working because of no DNS capabilities. We want to point their DNS to Cisco Umbrella which I have created as objects. Can ...

Firepower v6.0 - Files policy - Is it possible to add new file types/extensions?    How can this be accomplished?   Thank you.

I need to configure DNAT in cisco asa. my servers in DMZ should be accessed from internet. Can anyone explain me the steps along with commands or asdm screenshots.

I'm trying to allow traffic to and from a URL, specifically upgrade.bitdefender.com/av64bit-eps or ip add: 104.18.168.222. I've attached an image of how it's configured on the FMC. Traffic is still not being allowed so I'm trying to confirm what the ...

Hello, I have a ASA 5545X with two outside interfaces. We are using both wan links with route maps. So WAN 1 is used by VLAN 100-120 and WAN2 is used by VLAN 200-220.When I configure incoming nat to access a webserver in VLAN 100 over WAN1 everything...

Want to regulate Profinet traffic on a:FPR-1120 - ASA 9.13(1)Mode = Transparent https://wiki.wireshark.org/PROFINET/RT Is there any way to allow this traffic? Has anyone an idea for me? Thanks in advanceJOP