Network Security

My question is how we allow VPN traffic via the outside interface but block internet traffic that happens to have the same source address as the remote VPN network ? If you disable the bypassing of interface access lists on an ASA using the "no sysop...

Hi guys, We have 2 FP4100 devices in operation and managed with a FMC virtual. Due to organization policies, there is no Internet access in the hosting site at all. So we use SSM Satellite server VM for Smart Licensing and we synchronize it also with...

My Internet FW has moved to a FP2130 box. Can anyone point me to an example of how to configure my WSA to communicate WCCP with my FP2130 . I am reading that I would have to use "FLEXCONFIG"?? on my FP box?? MY FP box is running 6.2.2. thanks for any...

Hello, I have an ASA running on a FirePower2110 . I applied a config of another decommissioned ASA and, now, I can't log in. This is an old password that no one seems to remember. I've searched online for any information or Cisco documentation on how...

Hi, I can only find information about ACL limits for the physical ASA appliances. Does anyone have figures for the ASAv50? Regards.

Hi I've Cisco ASA with model 5516. We have enable IPS (SFR) for traffic inspection. Since the IPS is part of the software module and have configure the management ip. We planning to monitor the IPS by using monitoring tools. Beside we monitoring the ...

Hi everyone.Sorry I am a newer on Cisco FTD. I have an issue with rtp traffic. We have some branches (spokes) and thay all communicate with each other over Data Center (Hub). Behind the Spoke-1 We have a CME and some branches (for example Spoke-3) ph...

Dear All,We have two  ASA 5580 in fail-over mode. Our users connects to VPN using Anyconnect.This VPN login is authenticated from AD (For domain users: who logs in to domain) But there are such users in AD who does not log into AD but uses VPN to con...

Hello all, I'm a beginner in firewall devices, and I hope you can assist me on this issue. As you can see below, we have setup logging on both ASDM and a remote syslog server.If I view in ASDM, I see that syslog ID 106100 is logging, along with other...

Hi there,Firewalls located 30km away from each other and linked via optical fibre. Mode: Active/Standby.I am using 5545 firewall pair. Failover working fine with single fibre link / port from each side.For resiliency, I want to add two fibre link for...

I'm testing out FDM. So far, I love it!!!! However, when I apply an intrusion policy to an access rule.... is there a way to make it so the intrusion policy is passive? So it does NOT drop? So treating it more like an IDS. I see I can go into the Int...