Network Security

Hi Experts,CLI Reference for "icmp" command states "The icmp command controls ICMP traffic that terminates on any ASA interface." As I read it, this is filtering on ingress (ie. incoming ICMP message).But this example in same document throws me off:T...

Hi all, My org is looking to implement a per-device or per-user client certificate to accompany uname/pw authentication in AnyConnect. Is it possible to do this in Firepower Management Center? We are interested in preventing our security from being c...

Hi,Has anyone had any issues with these rules allowing traffic they shouldn't be ?  We've had this twice that we know of.  The first time around someone added a rule that wasn't specific enough and didn't enable logging so there were lessons learned ...

My users are not very PC savy so when Firepower redirects them to the captive portal, sometimes they do not click continue to proceed to the portal (since its a untrusted https site), so i want to apply a internal trusted cert to it so it takes them ...

Greetings!I am currently working on securing a small business network. We have 2 RV340 routers connected together. Router 1 (R1) is connected to the modem and Router 2 (R2) is connected to R1's LAN port from R2's WAN port. The intent is to have R1 co...

Hello folks,we have 20+ branches for one of our customers connected to our DC via L2L IPSEC tunnels. one of their newly open branches was installed with ASA 5506-X as FW with two internet connection links. I have configured  PPPOE  for one of interne...

Dears,In cisco asa firepower module's show time output, two times are shown. 1. UTC - Thu May 21 03:24:29 UTC 20202. Localtime - Thu May 21 08:54:34 IST 2020 My queries-Our external syslog server is receiving logs from this module with time stamp men...

I'm unable to find any documentation with regards to adding a vlan to vlan-group that has multiple vlans already and whether it would be an atomic operation, i.e. the new vlan is added on, rather than reconfigured with a new list of vlans.Here is an ...

Hi all, I am trying to make port forwarding on ASA 5506-X 9.12.2.ASA has one public IP address. I want to forward ports www and https to server behind inside interface (not DMZ). Here is configuration: interface inside 10.11.6.10outside 44.44.44.44se...

Hi, We realized that we have a number of countries in access control policies where traffic is blocked coming into the network but a lot of these countries are not selected in object management. This might be a misunderstanding on our part, but we th...

I am new to cisco's so I am assuming I made a simple mistake in the setup of my cisco ASA 5506 when I use the packet tracer I get this output  packet-tracer input inside_1 icmp 192.168.2.200 0 0 8.8.8.8 Phase: 1 Type: ACCESS-LIST Subtype: Result: AL...

I have a flex config with something like this.object-group network OnlyYou_Testnetwork-object host 1.1.1.1network-object host 5.5.5.5 Now I want to addnetwork-object host 2.2.2.2to the OnlyYou_Test groupand remove network-object host 1.1.1.1without r...