Network Security

Customer has East-West server-to-server TCP connection which must stay up for 12 hours.  I found where to adjust the TCP session timers:  that works.  However, where can I adjust the NAT timeouts so xlate also stays up for 12 hours (don't want to use...

Hi all, We are using AnyConnect on Cisco ASA, but we use the gateway on core switch instead of ASA.I'm curious to know does ASA perform RPF check even it's not the next hop for the traffic? Because I've confirmed the traffic is pass on packet tracer,...

Hello,  I require to allow *.database.windows.net.on 1433 port from one Private Subnet .  In my Firewall there is URL Filtering License. But URL Filtering does not help me here as Destination port is 1433.  Is there any that I can allow this link as ...

Hello, I have been looking at the CIPB website and want to figure out the best way to block Russia, India, China, Iran, basically all non North American IPs. Has anyone done this on a ASA? If so how did you accomplish it? I also have a 3750G I could ...

Hello all,I have configured 3 separate vlans using sub-interface on ASA firewall with 3 different security levels. And configured trunk with a layer-2 switch allowing all vlans to that trunk port. See the below information for your better understandi...

I am looking to upgrade to a Cisco Firepower 1140 firewall but the added cost of having all three Threat Defense Licenses makes it pretty expensive as it increases the cost of the solution by almost double. I am wondering if we dont go for the additi...

Hi Everyone, We are using a shared Cisco ASA firewall that is managed by an external ISP. I'm trying to get my head around the confusing terminology for the outbound and inbound interfaces that have ACL permit rules as follows: OUTBOUNDcompany_out ap...

Hello Team, Could you please help me to find an answer:Is it possible to configure Remote Access Vpn on Cisco FTD Virtual Appliance?If yes , what is the maximum numbre of simultaneous sessions?Thank you very much for your answer. Best regards,

Hello,  I require to allow *. database.windows.net.on 1433 port.  In my Firewall there is URL Filtering License. But URL Filtering does not help me here as Destination port is 1433.  Is there any way that I can allow this link as an Application ? 

Trying to get data out of our FMC to our SIEM. How do  you set up estreamer.conf to send the data to a tcp port? The operations guide mentions it, but not how to do it..... 

I've been trying to find if there are vendor-specific RADIUS attributes for linking our Windows NPS server to views/superviews on our 2900 series routers and haven't been having any luck. I've been using privilege levels but find managing those tedio...