Network Security

Hi All,On our ASA we have two Site-2-Site tunnels configured (and working). How would i/we be able to let traffic from Customer A flow to Customer B through the 2 existing tunnels. If crypto maps or anything need to be changed at the customer ends, t...

Hi Guy's!I have an issue I need some help with. In the log files we keep getting Deny tcp src outside:  when this happens we are unable to receive some emails.  I have attached a screen shot.  Any help would be appreciated!   Thank you! %ASA-4-106023...

I am in the middle of editing a few long ACLs that were created before my time. What I noticed is that when they were orginially created each line was created in intervals of 1. I know that I can copy the ACL out modify each line to be in intervals o...

I need help please! We have an ASA firewall with multiple VLAN's configured. It is an old environment where we have servers configured with multiple NIC's with different IP addresses all in different subnets. We have a desktop VLAN, on the same ASA, ...

I was running a TraceRoute to a remote server that goes through our new ASA5516x Firewalls, via a Private link to our Partner site, I know it is at least 5 hops in to reach this server, as we just migrated from our older 55xx EOL Firewalls, and could...

Hi Community Members, I am new to Networking and have a question, that appears difficult to me but to experts like you, it can be an easy one Our LAN Subnet: 192.168.171.0/24Our VPN Subnet: 10.251.251.0/24 Our client has allowed our LAN subnet (192.1...

Hello,I actually reimed a cisco firepower 2100 in asa.The problem is that when I go to create the port channels I can do it without problems but I can't associate the ethernet with the channel-group x mode active command because it answers me that th...

Hi, experts.After applying in the FTD a rule to block the Teamviewer application for the internal hosts to internet (INSIDE to OUTSIDE),I found in LINA this: FTD-5516X-XXX# show access-list CSM_FW_ACL_ | i 268434489access-list CSM_FW_ACL_ line 219 re...

Hi Folks,  I have an internal server that does not run Apache, it can be reached from external via port 80/443. I get a malware event alerts for dropped traffic from Outside to Inside for an inside server that does not have Apache installed. I though...

Hi Folks, If I receive an inbound attempt from outside to inside and it triggers snort rule 45304 (oracle weblogic signature). How do I know if this is relevant regardless of whether it is (oracle weblogic in this instance) actually installed/listeni...

Hi,  When Firepower IPS picks up a bad attempt from the internet inbound it blocks it and sends an impact 1 event to my alerting. I typically do not need to action much for such blocked situations. I'd like to set my alerting up for the other directi...