If I create a rule that Fastpath's for example: Szone: INSIDEDzone: OUTSIDES: ANY 1.1.1.1 Does return traffic from 1.1.1.1 to what initiates the connection get Fastpathed or do you need another rule to Fastpath the reverse traffic? Is that true for U...
Forum Posts
Resolved! ASA asa912-k8.bin Image
Good evening everyone, I need some help on an issue I'm running into. Currently, the image on my ASA 5510 Firewall is gone. The image I had before was asa912-k8.bin and it's gone even on the backup I had just in case this happened. I contacted Cisco ...
Hello,If I SSH directly to my Firepower, I can run the following command :> show vpn-sessiondb summary --------------------------------------------------------------------------- VPN Session Summary ---------------------------------------------------...
I am a very new at protecting a Cisco router from Internet attacks when they have a dedicated IP address. I tried the AutoSecure command, but it shut everything down even though I went through the question process with it. Security is not my area of...
Resolved! Cisco ASA 5545X Error Message
Hello All, I am getting an error message in the CLI : "MAC decrypt: MAC length error" We are running ASA 9.14(1) Error repeats itself approximately 3-4 minutes...
Resolved! ASA rule check
Hi All, Before applying any new firewall rule (source, destination, port) is there any way , i mean a show command in ASA to check whether rule is already permitted or denied by ACL ? Regards, Muhammed
Does anyone know of any ACL tool (preferably freeware) that will allow you to load an ACL and run an IP against it to see what line (if any) it hits? I have seen tools that allow you to manage ACLs, but haven't ran across anything that computes the ...
On the ASA and FWSM, is there a way to check which ACE would be blocking a particular traffic? I'm looking for a command where I just tell it which ACL is use and feed it the source-ip/port and dest-ip/port.Thank you in advanced.Vince
For ASA firewalls (SOC customers that send firewall logs to QRadar by syslog), we have them configure a base logging level of 4 (Warning), but we also need a subset of level 1 (Informational) events sent to QRadar as well. These events are: 106100 – ...
Hi All, Is there a way to export/import VPNs to a higher model FMC x500 from FMC 1000. Is there any chance of impact on the VPNs while we remove the FTD from Device manager in FMC lower model and then add it again in FMC x500 model. Can there be any ...
Hello, I have a backup schedule set from "FirePower Management BackUp". To my understanding this is doing scheduled backup for FMC with "Back Up Configuration" option ticked. But question is what this file consist of ? I mean which file they are ...
Hi guys,Need your help on below situation.I would like to configure the netflow on the FTD. FMC is running on 6.4. I created new flexconfig object and defined the destination. Created new flexconfig policy and assign the firewall accordingly. These ...
Hi everyone, I would like to know if it is possible to have an email sent to the admin whenever someone visits a website that is related to a certain topic. For example if someone is searches/access content that is related to "burgers", is it possi...
Hello Folks, reaching out to you for some help,I have a simple setup in my 5510 , 2 interfaces: first one for OUTSIDE and second one for Inside with multiple sub-interfaces (vlans) :- all subinterface on the same security level, - same-security-traff...
Hi. I am doing the Lab "Configuring an Intrusion Prevention System" of Chapter 5 "Implementing Intrusion Prevention" of "CCNA Security" on Netacad. I have a question for the Step 3 "Modify the signature" of Task 6 "Test the IPS Rule and Modify a Sign...
