Network Security

Hi I have this Scenario.  LAN1 --- ASA1:192.168.1.158/27--------CORE---------192.168.1.48/26:ASA2-------LAN2 If you note both the ASA's  Internet IPs are on the same /24 but with in respective smaller subnets where i used this private ips just as an ...

Hi Engineer,I connected a layer 3 switch(sf-300) on inside interface. Inside ip is 192.168.1.1.I have given a ip address 192.168.1.10  gi1 port of switch.  I have vlan 10 and 20, which has ip address 192.168.10.1  and 192.168.20.1   so I made it rout...

Hello all,I have a situation where I want to allow traffic from one segregated network using private IPs (using Google DNS) to internal LAN (using local DNS) both are using the  same firewall. I am using ASA 5516 and has 2 external interfaces one on ...

please what difference between ip virtual-reassembly-out and out

Hi! We have an existing ASA5506-X and we would like to have a warm standby firewall via Cisco Meraki MX67. Is this feasible? 

Hi All,I use two pairs of Cisco Firepower 4110 in Cluster and a pair of FMC (physical appliance - Cisco Firepower Management Center 1000 version 6.2.3build 83) for all of our Cisco Firewall.When deploying task (a single route for example), It takes a...

Hello we would like ot check for deployed SRU/VRT package version actually running on NGIPS devices (sourcefireon asa or 71xx devices)Think this is possible via "show version" in CLI via ssh on device, but i cannot find a way to check (easily) for th...

Hi,I have the ASA with address range 172.26.0.10 - 172.26.0.200 configured as dhcp serverI have configured a PC on the inside network with a manual static IP address 172.26.0.3 that is not in the range of the dhcp server. To access the PC from the In...

Hi all,just looking for some design guidance and best practice on configuring the FTD/ASA VPN split-tunnel ACL with VPN-Filter ACL.I have a corporate network that is on the 10.0.0.0/8 network. And I want users access most of the corporate network thr...

Hello All,Please I need help.After configuring an ASA5506-X one PC on the LAN can't connect to the internet.I have disabled proxy arp on inside interface, to avoid a possible ip address conflict. I also did some traces, like below. ASA declare all Al...

I have to configure Site to Site VPN on Cisco Firepower 4100 with FTDs .... does Site to Site VPN require any licensing ?Also, does multi instance FTD support Site to Site VPN ?

We are running a 5516-X ASA, but not using FirePower. Is there any way i can disable FirePower? Because everytime i use ASDM i'm getting the error that it can't connect to the FirePower module.