Network Security

Hi,I have set up a new VPN tunnel to a remote site, but the tunnel will not come up.Running packet-tracer shows that the tunnel is failing with:Phase: 8Type: VPNSubtype: encryptResult: DROPConfig:Additional Information:Result:input-interface: insidei...

Hi all,I cannot install the SSL certificate we purchased onto my ASA. Here are the messages I'm getting:Can not select my public key (ssl.key)Received General Purpose certificate for signature keypairDo you wish to accept this certificate? [yes/no]: ...

Hello everyone,I have Cisco ASA 5525-X with following imagesasa922-4-smp-k8asdm 7.2(2)1asasfr-5500x-boot-5.4.0 I need to deploy the firewall in Datacentre environment. For this purpose , i want to create zones/zone pairs and assign interfaces to diff...

Hi Community, I am new with Cisco firewall and need some advice on the network diagram. We will deploy 2x ASA firewall 5516 with Firepower for external and internal. We will use SG500-X switch in the network for DMZ and LAN. Based on the diagram and ...

Hi All    Really struggling to find an answer to this which is strange.    Weve got got a couple of ASA’s with Firepower module on.   the firewalls themselves have got Certs installed from m our CA so we don’t get cert warnings. However I’m still get...

If you get a notification saying "Error in saving certificate: status = FAIL" when installing an SHA-256 certificate, this means that the SHA-256 algorithm is not supported. how to resolve this error please update me 

Hi all, I need to setup FMC in HA through the FW environment. I went through the configuration guide and cannot find clear confirmation which ports I need to open on the FW to allow HA communication. Is it just TCP 8305 listed in the configuration gu...

Hi Folks, Wondering if you can help me solve an issue. We are using split tunnel mode and I have some specific IPs that are going over the VPN i.e 10.0.0.1/24, 172.16.20.1/24. My Client IP assignment is issuing the clients IPs from 192.168.1.1/24. So...

Dear community,I would like to ask you for a help with following topics1. We have setup automatic email alerting on our FMC in case intrusion event or malware event is detected.below is an example of **Auto Generated Email** alert for detected intrus...

Hello everyone, I have a strange one for you. We have two ASA in active/standby failover. Due to a 4500-x(our cores) Bug we had to take down the inside and failover link of the standby firewall. Once we did this we noticed about a 1-3% packet loss on...

I try to understand some simple NAT things on Cisco ASA.I have multiple machines PAT'ed (Hide) to the Outside interface to provide Internet connectivity.On of those machines also has a application running on tcp/7550 which i want to access over the I...