Network Security

The problem with my Cisco ASA 5506-x is that is restarts itself . Who knows wich is the problem with this equipament? 

Hi.I beleave that my NAT setup is not optimal and/or correct - but works I have one wish: i need to see orginal host ip on other subnet I have 3 subnets connected thru ASA 5506. (simplified)They are routed using eigrp.1) 192.168.16.0/16 - Orginal "Co...

I work with LogRhythm and I am trying to filter out logs that did not get through the ASA firewall.  I see logs with the following message ID: 302013 Connection Built, 302015 Built UDP Connection, 302016 Connection Teardown,  Some of the 302016 logs ...

Dear All, Can we upgrade firepower management center virtual form CLI. Thanks.

Hi Everyone! Is it possible to manage via FMCv several remote FTDs or must the FMCv be deployed on the same LAN as the FTDs?Today I have devices on different clients with FDM and wanted to manage them via FMCv. Thanks!

Can anyone suggest me a custom rule to scan the content while downloading from FTP.I have created a custom rule with Source IP and source port as any any. Destination IP stands as FTP Server with port 21.In detection options I am using Content with "...

Hi, I have an ASA with FirePower and also have 2 x FMC in a HA configuration (over a layer 3).  My question is, how does the ASA FirePower senor know how to failover to the secondary FMC in the event the primary FMC dies?  Since the initial configura...

Hellolooking for assistance. Trying to figure out if there is a way to restrict the type of syslog messages I'm seeing.For example, is there a way to filter out syslog message %ASA-6-302013, and only see syslog message Syslog Message %ASA-6-106100 wh...

I have a pair of ASA 5520s. When I SSH to the firewall i'm prompted for username. I put in my username, but when i am prompted for password i can just hit enter and I am allowed in. Then when I go to enable mode and prompted for password I can hit en...

We setup GEO blocking in Firepower which appears to be triggering events, however the blocked countries can still ping outside interface of ASA?  Is this correct? or should I be seeing this blocked also?

Hi!Am trying to set up my network, the network will have inside, dmz1, dmz2 and outside interface. The most secure interface is dmz1 followed by dmz2 and then the inside interface. dmz1 and inside interface should ping each other. The inside interfac...

Hi All, Is there a best practise when configuring failover and statefu failover links between Firepower 4110 appliances? I want to configure both failover and stateful failover links, however I'm not sure if I should use a single 10GbE link for both ...