Network Security

I have an Active/Standby pair of 2130 appliances that is having a problem with the management interfaces when failing over from the primary to the secondary. When failover is invoked, the IP Address of the primary does not move to the standby and is ...

For my external interface on a 2130 pair in HA I have a port channel definedOn that external port channel, I have a sub-interface defined that has the main external IP which is part of a /23 public subnet on vlan 254 I am trying to add additional pub...

Hi all, simple question but I have a hard time figuring this out: I am using the FTD 6.4 Ansible module to upload a file to the device. What is the file location on the device after the upload? I can only specify the source location on the Ansible ho...

2130 HA pair running 6.4.0.1. I am setting up outgoing NAT/PAT. There are several internal interfaces with their own private subnets. My intent is to IP masquerade all outgoing connections from internal private subnet A to a pool of public IP's on my...

Hi All: What steps do I need for the below scenario to happen. I want to have a site to site connection but instead of having private addresses via the tunnel I will have one side have a private address being natted via static nat and then that stati...

Join the Customer Connection program to participate in our July 10 session on Cisco Defense Orchestrator (CDO) briefing.  CDO is a cloud-based security policy and device manager that simplifies and unifies policy across your Cisco firewalls. In this ...

Hi everyone My company using WSA and ASA with firepower, flow under the action of WCCP, be ASA redirect to the WSA, when the user's endpoint access to the Internet, I view the event on firepower, found that the source address is the address of the P ...

i have a ASA5520  with a ASA-SSM-10 with asa version 8.2(2) and asdm 6.3 , i need to upgrade it to the lastest which is 9.1.7 and asdm 7.8.1 , my question is that can i jump directly to these versions? or is there intermediate versions?also should i ...

hi. we configured firepower that scan new detected ip host using nmap. it works as expected. but when firepower scans host it is shown on event and Initiator User seems to be netadmin. Shouldn't it only depict Unknown for Initiator user? How we could...

Hi there, I'm reading the list of topics for the IINS 210-260 exam here: https://learningnetwork.cisco.com/community/certifications/security_ccna/iins-v3/exam-topics I'm using the official cert guide and if I check Appendix B for exam updates some co...

GreetingsI've been running ASAs with Firepower services 5508 up to 5525s for some six years now and would like to know if there is some consensus out there on where the majority of ACL should be implemented. I've always had an idea of keeping the bas...