Network Security

Hi Team,  Can someone please let me know why I would see Total output drops increasing on this interface. My issue is that there is a packet loss on traffic that travels via this interface. Could this be the reason? I don't have QOS enabled.  SW3#sho...

I have a hub and spoke environment with a bunch of ASA 5506-X devices. I was under the impression that for a site-to-site VPN between a user (behind a residential internet connection) and my public IP hub ASA, that the private space ASA would require...

Hi, I need to contact a remote LDAP server via the inside interface.this remote LDAP server is reachable via an IPsec tunnel and due to network overlapping we are natting source addresses before they passthrough the VPN.Is it possible to nat the insi...

Hi all   I've got a new ASA Firepower which replaces an other old ASA. The old one has various IP Audit Policies configured, but I think for legacy reasons. What is the default today in regards to IP Audit? Is this enabled by default or not? What are...

Hello I can not filtering more then one SID in intrusion policy. Can I search multiple SID? I have tried , : AND nothing worksalso can I select more category in one filter ?  thank you for help  Radek

Hi Today i found out that ASA5545 CPU went to 60% and it was all consumed by the DATAPATH-0-2326 process. I could lower it to 30% by removing a capture process that wasnt removed by ASDM after the program close.The average CPU usage three days ago wa...

Good day all,  Currently we have deployed Cisco FMC 1600 with FTD 1020 and 2100 in HA respectively. We are running version 6.4.0.4. The FMC has been configured to sync time via NTP and is showing the correct time.  The FTDs have been configured to pu...

Hi everyone!After upgrading FTD to 6.5.x on a ASA5508-X I keep strugling with the CLI jumping to the top of the scroll when using arrow up etc. Sometimes CLI will scroll to the bottom when starting to type a command but most of the time i need to man...

Hy guys I have the following scenario and problem ASA 5516-XCisco Adaptive Security Appliance Software Version 9.6(1) <context>Device Manager Version 7.6(1) Escenario:I have a connection with one of our clients through VPN L2L with 2 different IPs, t...

Dears , i want to resctrict the access to VPN IPsec remote access to some public addresses  .can i do that with asa  ASA5512 version  9.1 ??

dear All,I have Cisco 5516 and i want to enable traffic inspection , so do i need separate Firepower threat detection device or we can enable it in existing 5516 firewall as well. if yes how to do ?also we need to enable URL filtering as well.Then we...