Network Security

With reference to attached deployment scenario , need to understand on the following Failover use cases: Case 1 : Link Failure  - If the link to the Primary Nexus Switch Fails then will the secondary Nexus switch become active ? and how will the traf...

I am using a single global policy on an ASA HA pair acting as an inner Firewall. We have rules broken down into 'sections' for different solutions / systems. One rule allowed inbound DNS from DMZ to Internal DNS servers. This rule was disabled, pendi...

With reference to the attached diagram, how will the traffic switch take place when the primary HSRP Switch fails.What will be the traffic flow direction in such a scenario.. If the Firewall is monitoring PortChannel 2 for failures so in case Primary...

Hi There, I have cisco asa 5505 firewall configured as per configuration I am able to access internet.Also I configured ssl vpn but I am not able access my internal network after connection.Please help anyone to sort out this.I am not getting what I ...

Hi all, I have an FTD 6.3 on Firepower 4110.  It is configured in routed mode with "the usual" configuration: outside, inside, DMZ, and serverfarm interfaces/zones with traffic allowed out but not in. I also have AnyConnect services for remote access...

I want to keep track of the change in ACL in ASA by using TACACS+ accounting, by determining the user, command, time,...    I have the following command in ASA:   aaa-server ********* protocol tacacs+ aaa-server ********* (inside) host x.x.x.x aaa-se...

Hello,I have a situation with an ASA 5508-X where I cannot get any traffic to pass through on anything other than it's own IP address on the outside interface. To clarify, the outside interface has a /28 on say 1.2.3.34/28. Traffic passes through for...

FMC 6.2.2  FTD's 6.2.2   We have a custom HTTP Block Response Page which does what it is supposed to do.  However, we don't want that custom block page to be displayed outside of our network/Intranet.   So, the Block Response page is a part of the Ac...

Trying to block icloud.com/mail It's blocked if I go to http://icloud.com/mail, but https://icloud.com/mail is allowed. I tried to block URL https://icloud.com/mail, but no go. Would the firewall have to be configured for SSL decryption to block this...

Hello guys, I am new to network monitoring and using snmp based monitoring for asa 5506x ,5524 etc. Could you please guide me what are other critical performance parameters which should be monitored apart from cpu,memory, and hardware monitoring.