Network Security

Hello All, We are using Cisco ASA 5585-X  for many years however we are facing a lot issues with a stable version of the software image presently we are using  Version 9.4(4)20 however present software have seemed to be a bug as memory utilization is...

Hi, I edited  the default policy  for ikev2 ( it is done for ipsec site to site vpn policy )The below is before editing crypto ikev2 policy 1encryption aes-256integrity shagroup 5prf shalifetime seconds 86400 and the below is after editing  crypto ik...

Hello, everyone. I nee clarification about one thing. We are using FTD devices on out corporate network for RA ans S2S VPNs. FTD has one interface for internet and one WAN interface leased from SP for 3rd Party companies. Currently we have one site-t...

Hi Friends, I have gone through the web and found that ASA 5555 FTD comes with a default 2 context license. so my query is as below. can we create two context admin+2? or we can be able to create admin+1? my requirement is to create 2 customer contex...

HelloIs there a CLI command to obtain unused objects on the FMC?We are using FMC with firmware 6.4.0.4Right now the FMC has nearly 18,000 objects and we need to eliminate the ones that are not used. Regards 

during vulnerability scan on my hardware router.SSH Server CBC Mode Ciphers Enabled and SSH Weak MAC Algorithms Enabled appears on the reportRecommendation are to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption and di...

Hi, needing help here, I have setup a pair of 1841s site2site with static IP at HQ and dynamic IP remote.  PC and a Cisco 8861(with a PoE adapter) behind the 1841 all work fine. Then I took an ASA5505 (want to use its PoE port), setup as remote dynam...

Hello, I am sending this message because I am in trouble to configure a backup IPSEC VPN over internet with one of my client. Indeed, we currently have a working VPN between my ASA firewall and my client Cisco router. In order to get redundancy, they...

Hello I am having an issue with one of our firewalls locking up and I figure I would ask here while waiting to get an issue with my support contract worked out. This is an ASA 5516X with firepower running 9.6(4). So far this has happened twice and th...

Hello Members,i just ran a NMAP scan on the outside interface of a ASA 5520. It seems that the TCP Ports 7070 and 554 are open on all NAT interfaces and the outside interface of the firewall. I tried telnet on port 554 and 7070 and got connected.Any ...

All:   I had originally posted this question last weekend, and several people responded with the answer. And I wanted to thank them,.  However, I accidentally deleted the original post while trying to move it, so here is for the great brain-trust in ...