Network Security

Working on a design to essentially deploy a secondary 4110 with FTD and another 5555-X for VPN HA.  My current thought process is to simply use static routes from ASR down, and FTD up with SLAs since no dynamic routing is currently used within the st...

Hello Everyone, I have a question and have not found an answer while Googling or reviewing the FirePower Documentation.  At the end of some of my emailed alerts, I see (+#) where # is from 0 to 7.   What does this information represent? Example (Clea...

Hello;I'm new into firewall things. I have a asa5505 to configure. my ISP gave me a ip address to use (x.x.x.x) and their gateway ip address (Y.Y.Y.Y) and I set the outside Vlan to use static IP and simply used "route outside 0.0.0.0 0.0.0.0 Y.Y.Y.Y ...

A customer of mine has an ASA5555 given to him in multi-context mode.  There's only the one context being used as it is so seems pointless to have it set up like that. Is it just a case of changing to single mode and then copy and pasting his config ...

Hello;I'm new into Cisco firewalls. I have an asa5505. At initial setup of the device it has a "pre-configure through interactive prompts" option where it ask for "Management IP address" which can not be left empty and I noticed it will create a mana...

Its getting really annoying now, and it is also always the same, Cisco posts a new interim update and it takes ages until the release notes are published. Can anyone from Cisco please fix this process for good? Looking at the latest 9.6.4 interim rel...

Hi, We have the following on a Cisco 2901: Current configuration : 1999 bytes ! version 15.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Sky-GW01 ! boot-start-marker boot-end-m...

ssues connecting to Cisco ASA 5545x using ASDM and Windows 10.ASA OS 9.12.(2)ASDM ver 7.12(2)Java JRE 1.8.0_192We are experiencing long logins to our local ASA's using local accounts (No AAA / RADIUS). If the ASDM opens up the ASA, we will often get ...

Hi All,   I recently moved from policy based VPN to Route Based VPNs and everything is working great except for trying to SSH across the VTI tunnel to the ASA Inside interface.   I can telnet to the Inside Interface across the VTI, just no SSH. All t...

We are currently using DUO as our MFA provider for our AnyConnect sessions, on an ASA5555-X.  It is working fine, but we are switching providers to Okta.  The trick is going to testing and rollout/.  We have a LOT of employees, so we can't just hot c...

the request is when the traffic hit the public IP on port 222, i need to redirect to a internal server on port 22.mu configuration is like this: object network FTP-Accessnat (dmz2,outside) static FTP-SVR-Public service tcp ssh 222access-list global_a...