Network Security

Hello experts, I have two ASA 5545X active-standby and I have an objtect-group natted to the outside interface, inside of the object-group I have one host, for sometime the host able to browse to the internet but now not working. The trace from the r...

Hi guys,I have an issue with a Firepower 1010 (running 6.5) and the FDM.I have a long list with public IP addresses (one address per line) and need to create a Blacklist in the FDM (FMC cannot be used there).When I go in FDM under Policies > Security...

Dear All,I need to upgrade ASA 5525-9.4 to 9.8FMC(virtual )  existing version is 5.4.1SFR existing version is 5.4.0 My first question is  ,do I have to check the compatibility with ASA version for SRF? Or  since ,SRF totally managed by FMC,I have to ...

I have two ASA 5525X in a High Availability (Active/Standby) configuration both running Firepower services licensed on both for IPS, AMP, & URL. I'm managing both ASA FTD's through a virtual FMC. My question is: Do I also need to configure the High A...

Hello All, I am trying to get a general repository of logs from our security appliances to a syslog-ng server. I have managed to do so successfully for all our ASA firewalls, but I cannot get logs from our Firepower appliances to populate to syslog-n...

Hi,I have set up a new VPN tunnel to a remote site, but the tunnel will not come up.Running packet-tracer shows that the tunnel is failing with:Phase: 8Type: VPNSubtype: encryptResult: DROPConfig:Additional Information:Result:input-interface: insidei...

Hi all,I cannot install the SSL certificate we purchased onto my ASA. Here are the messages I'm getting:Can not select my public key (ssl.key)Received General Purpose certificate for signature keypairDo you wish to accept this certificate? [yes/no]:...

Hello everyone,I have Cisco ASA 5525-X with following imagesasa922-4-smp-k8asdm 7.2(2)1asasfr-5500x-boot-5.4.0 I need to deploy the firewall in Datacentre environment. For this purpose , i want to create zones/zone pairs and assign interfaces to diff...

Hi Community, I am new with Cisco firewall and need some advice on the network diagram. We will deploy 2x ASA firewall 5516 with Firepower for external and internal. We will use SG500-X switch in the network for DMZ and LAN. Based on the diagram an...

Hi All    Really struggling to find an answer to this which is strange.    Weve got got a couple of ASA’s with Firepower module on.   the firewalls themselves have got Certs installed from m our CA so we don’t get cert warnings. However I’m still ge...

If you get a notification saying "Error in saving certificate: status = FAIL" when installing an SHA-256 certificate, this means that the SHA-256 algorithm is not supported. how to resolve this error please update me 

Hi all, I need to setup FMC in HA through the FW environment. I went through the configuration guide and cannot find clear confirmation which ports I need to open on the FW to allow HA communication. Is it just TCP 8305 listed in the configuration gu...

Hi Folks, Wondering if you can help me solve an issue. We are using split tunnel mode and I have some specific IPs that are going over the VPN i.e 10.0.0.1/24, 172.16.20.1/24. My Client IP assignment is issuing the clients IPs from 192.168.1.1/24. So...