Network Security

ASAv Version 9.6(4). After a reboot of the EC2 instance, the ASAv looks like it comes up and is working correctly, but nothing gets routed and the NAT translation doesn't appear to work.   Doing a show xlate only shows the NAT object definitions but ...

Hi everyone ,I have a topology  there are 2 firewall at my side ASA1 (Internet firewall) and ASA2 (Internal Firewall ) , ASA1 mange by other one . 3rd party wants to make VPN with ASA2 .we have a public ip (205>xx.xx.xx) witch is provide by ASA1 mana...

Is it ok to run a snapshot for the FMC VM? It seems that if I were to take a snapshot the log file would continue to grow rapidly due to all the database writes pertaining to connection, host, discovery events etc  If completing a major version upgra...

HI Everyone， We want to do a downgrade for our ASA, they are working on Failover A/S mode. I am not sure about this operation.What should I do? Is there a detailed step? Does the implementation of this downgrade process require a transition to an int...

The affected device uses the same base access-control policy (and same pre-filter policy) as all our other inline firewalls. Where we have sites that need additional rules, we create a child policy that inherits from the base access-control policy. I...

Hi All, Can we copy & paste rules from one policy to another in FMC ? I am in middle of a migration where we are using FMT tool to migrate rules however we are facing lot of issues. Every time we run FMC, it creates a new policy however we want to cr...

We are trying to configure our Cisco for SIP but after opening all the requited ports we do not have audio. We can call extensions from different locations, just can hear each other outside of our location. The IP phones in-house we can call and hear...

I have a rather stubborn occurrence. I keep getting:         Deny IP spoof from (10.87.88.1) to 10.141.36.60 on interface inside.  This is connected via VPN. 10.87.88.1 is the VPN Termination point. It is a site to site connection. The 10.141.36.60 i...

Hi everyone We recently purchased 4 x refurbished C-20 codecs for our distance learning program with our satellite campus. Our original C-20 performance were beginnning to slow down.We have been using our Cisco Telepresence appliances for almost 10 y...

Hello, After upgrading our FMC 4500 to 6.5.0, we can no longer SSH into it.Here are the symptoms:1. Before upgrade, we could successfully use Putty and SecureCRT to access CLI via SSH2. We are trying to use Putty and SecureCRT and neither emulator is...

I’m having an issue where I can’t reach one of the outside interfaces on the ASA.I keep getting in the logsFailed to locate egress interface for ICMP from outside2.Here is the high-level topology.2 outside  interfaces1 called outside1 (the one I can’...