Network Security

We want to allow few clients machines to be able to connect directly to various subdomains (For eg :- xzy.com )We need the firewall to allow clients to be able to connect to *.xzy.com domains names (rather than by IP address).Is it possible in ASA 55...

Hi, I came to know that below two functions are not supported by FTD/FMC.Can anyone please have some details, what are these used for  - Outbound content filtering- Caching

Anyone have any experience or advice deploying a FTDv 6.4 on ESXi 6.0.0 (9313334).  The OVF deploys w/o any issues, but when I try to power it up the VM comes up and then loops.  Last thing I can seem to read is unsupported cpu, then i see it dumping...

 Hello, I have ASA with next interfaces:inside, security level 100outside, security level 0wifi, security level 50dmz1 security level 20Ad have in dmz1 server, for example 10.10.10.2 and my outside interface Ip for example 128.10.10.2/27I have nat (o...

Hi,We have converted Cisco FPR 2110 to ASA 9.12.2 we have got only two ports only working and remaining ports are not working. Eth1/1 and Eth1/2 and other Eth1/3-9 are not coming up only regardless its showing not admin down. Thanks, 

Hi, Have a Cisco ASA - lots of IPSec VPN's to lots of places. The allowed service in the Cryptomap was IP to all - we decided to narrow this down to SSH, RDP etc. I created a group for the ports and added to a test VPN - all worked well. I then appli...

Hi,we are running two failover pairs of asa (5510, 5505) in two different locations in active/standby configurations.Is it possible to access the inside ip of the standby unit via vpn terminated by the active unit? It's only for monitoring.With our c...

This is an ASA access list question. Why am I not able to ping the host in the DMZ from the host in the OUTSIDE? I have ACL's configured to allow ICMP, so not sure what I'm missing here.  

   TEST PLAN FOR TACACS+So we are implementing tacacs on all our firewalls in the next week or so I have some doubts so that I don’t lock myself out.I First thought most cases of users locking themselves out was due to the authorization part.So here ...

Hi, we've a Cisco ASAv licensed in Permanent License Reservation mode. We can't use standard Smart License or Satellite communications way. Basic license was inserted into Smart Account and it was installed correctly, using License Reservation wizard...

I'm using ASA cisco 5520 with ASA version 8.0 and ASDM 7.1. My network only set DMZ and outside.DMZ: 172.16.77.1 and Mail server: 172.16.77.100.Outside (PPPOE): IP public get from ISP (and I have 1 IP static: X.X.X.27).I'm browsing a lot of pages on ...

Hello - I need some config help with deploying a Shoretel VPN concentrator in my network.  Per the documentation, one leg would be connected to my 2110 on a dedicated DMZ port, the other leg would be connected to my LAN.  The config on the 2110 would...