Network Security

Hello everyone,I have Cisco ASA 5525-X with following imagesasa922-4-smp-k8asdm 7.2(2)1asasfr-5500x-boot-5.4.0 I need to deploy the firewall in Datacentre environment. For this purpose , i want to create zones/zone pairs and assign interfaces to diff...

Hi Community, I am new with Cisco firewall and need some advice on the network diagram. We will deploy 2x ASA firewall 5516 with Firepower for external and internal. We will use SG500-X switch in the network for DMZ and LAN. Based on the diagram an...

Hi All    Really struggling to find an answer to this which is strange.    Weve got got a couple of ASA’s with Firepower module on.   the firewalls themselves have got Certs installed from m our CA so we don’t get cert warnings. However I’m still ge...

If you get a notification saying "Error in saving certificate: status = FAIL" when installing an SHA-256 certificate, this means that the SHA-256 algorithm is not supported. how to resolve this error please update me 

Hi all, I need to setup FMC in HA through the FW environment. I went through the configuration guide and cannot find clear confirmation which ports I need to open on the FW to allow HA communication. Is it just TCP 8305 listed in the configuration gu...

Hi Folks, Wondering if you can help me solve an issue. We are using split tunnel mode and I have some specific IPs that are going over the VPN i.e 10.0.0.1/24, 172.16.20.1/24. My Client IP assignment is issuing the clients IPs from 192.168.1.1/24. So...

Dear community,I would like to ask you for a help with following topics1. We have setup automatic email alerting on our FMC in case intrusion event or malware event is detected.below is an example of **Auto Generated Email** alert for detected intrus...

Hello everyone, I have a strange one for you. We have two ASA in active/standby failover. Due to a 4500-x(our cores) Bug we had to take down the inside and failover link of the standby firewall. Once we did this we noticed about a 1-3% packet loss on...

I try to understand some simple NAT things on Cisco ASA.I have multiple machines PAT'ed (Hide) to the Outside interface to provide Internet connectivity.On of those machines also has a application running on tcp/7550 which i want to access over the I...

Hi,I have 4 x pairs of 2130 with about 18-22 contexts max on them.  One pair has consistently hit this bug and there seems to be no way to determine why/how?  anyone have had this and what was the cause.

Hello,  I have FTD on ASA 1010 and I would like to block file exchange to and from google drive. I have set up a rule with no luck. Where do you suggest is the best place to put the rule? Access policy or somewhere else? Thanks and regards, Konstanti...