Network Security

Packet drops on Firepower inline-set Interface..We have setup where having 2 JUNOS Active/Passive firewall connected to Cisco VSS switchwe placed the 4150 IPS in between with 2 Inline-Set with ACL policy allow all and un-checked "Drop when Inline" an...

Hi guys, I am starting to study for CCIE security and trying to install the FTD virtual appliances. No matter what I try or what version I use it always crashes. IT goes through the installation and gets to a certain point and displays an error abou...

Hi All, I am trying to ssh and launch ASDM for management IP of ASA.  I have ASA with SFR Module. (SFR Module is using mgmt0/0 port for communication, no ip assigned physically on interface and port is connected to management vlan as access , works f...

Hi All, I need to Migrate the FTD 2140 Standalone device and 2110 HA Pair FTD devices to new FMC. We are running 6.4.0.4 on the FMC and the FTD's.As I understand and read, We have a Migration process in 6.5 wherein we can move all sensors & FTD's new...

Hi Experts,ASA configuration guide lists both "user-identity domain" and "user-identity default-domain" in relations to a single identity-firewall configuration, often with same "nickname" and "NETBIOS_name" respectively, (IMO) without clarifying the...

I am having an issue pinging through my ASA. I am able to ping from my outside interface on the ASA to the internet and from my client pc (on the inside network) to the (inside) port on the ASA, but can not go through. ISP gateway - 192.168.1.254 /24...

Good Morning Team,I have ASA 5555-X on Version 9.1(1) I wish to upgrade it to the latest version. I can't get my head round the upgrade path. Can anyone please advice? Thank you

Hi,What may cause firewall lost its running configurations on loss of power? I am unable to save the running configurations on the flash disk if that is the reason. Anyone had similar experiences can share useful input?

Customer has East-West server-to-server TCP connection which must stay up for 12 hours.  I found where to adjust the TCP session timers:  that works.  However, where can I adjust the NAT timeouts so xlate also stays up for 12 hours (don't want to use...

Hi all, We are using AnyConnect on Cisco ASA, but we use the gateway on core switch instead of ASA.I'm curious to know does ASA perform RPF check even it's not the next hop for the traffic? Because I've confirmed the traffic is pass on packet tracer,...

Hello,  I require to allow *.database.windows.net.on 1433 port from one Private Subnet .  In my Firewall there is URL Filtering License. But URL Filtering does not help me here as Destination port is 1433.  Is there any that I can allow this link as ...

Hello, I have been looking at the CIPB website and want to figure out the best way to block Russia, India, China, Iran, basically all non North American IPs. Has anyone done this on a ASA? If so how did you accomplish it? I also have a 3750G I coul...