Network Security

We have 2 pairs of HA 2110 Security Appliances managed from an FMC all running 6.4.0.2 currently trying to get kerberos working All seems correct and in place joined AD, LDAPS, ACL Rule, SSL rewrite policy, Identity Policy configured with a cert usin...

Hi Gents, This is an easy one, but i can"t seem to figure it out. I have a pair of 5515X in failover with three interfaces(inside, outside, DMZ) and a sub-interface(uses the DMZ as main). So i use the DMZ interface to create a sub-interface, i had no...

I have a router with two segments. Outside segment is the client and inside is the domain controller. I need to define ACL on Outside interface to allow communication for active directory.   Router will use packet filter ACL (no state full inspection...

We are configured Cisco ASA firewall with three network , One Router and a Switch.One Anti-Virus server are used for antivirus server updated, IP 124.124.124.2 which is connected to Campus Router *Campus Router Cisco 1841 Interface Gig0/1 = 124.124.1...

Hi! We have an ASA 5555-X as firewall and our uplink channel is ~350-400 Mbps. And there is very strange thing happen: as more traffic pass through uplink interface as datapath proccesses get big values.For example right now we have ~200 MBps on upli...

Hello Im about to switch from a Cisco 5555X to a 2130 as our main FW. I have several Cisco ASA 5505/5506X/Others with encryptions which 2130 6.5 warnes me will be deprecated in the future. (see picture). I was considering a change in DH groups on our...

I need to set up 6 Point to Point VPN tunnels to business partners. Due to our limited number of public IPs I want all of these to NAT through the same PAT address. Currently I have set up an entry like the below to use as a PAT address: object netwo...

Hello Everyone,It may very well be the time of day I'm writing this and long hours of looking at the screen.. but I'm setting up a lab ASA with an inside and outside interface. Inside interface is connected to a L3 Nexus 3064 using a transit VLAN ( 1...

HelloWe want to integrate Firepower with ISE via pxGrid.We do not have a internal CA server so we want to use ISE as internal CA with local self-sign certs.As far as I know on Firepower I need to generate a CSR so it will be signed by CA (Cisco ISE) ...

Hello, I am trying to figure what would be the ASA configuration that could do the same thing this watchguard does, I need the configuration.that Fa0/0 carries vlan 10, 20 ,30 and they are just vlans, fa0/0 interface is probably a router on stick so ...

Cisco ASA Interface are connected to Cisco 3560 switch  Cisco ASA Gig 1/1 = Cisco 3560 Switch Gig 0/1Cisco ASA Gig 1/2 = Cisco 3560 Switch Gig 0/2 ********************Cisco ASA Configuration******************** interface port-channel 1nameif insidese...

Hi we have a cisco asa5585-x firewall and it is crashing twice per week and it is generating crash dumps.can somebody help please?ASA-SSL-VPN-III# show versionCisco Adaptive Security Appliance Software Version 9.6(4)12Device Manager Version 7.9(2)152...

If filtering were to stop working for whatever reason, will the ASA fail to a secure state? How can I verify this?