Network Security

Hello,Is Anti-replay (replay resistance) on by default, or is this something that you have to activate?

Just looknig for some advise in regards to keeping ACLs, objects, etc. clean and manageable. I know in a large prod environmnet, constantly adding IPs to block, adding rules, etc. can lead to a messy harder to understand ASA with rules on top of each...

Hi,  we have a customer has two FP9300 chassis with two FTD security module per chassis. the customer asked for a cluster deployment  the question is can we have intra chassis cluster for each chassis using the two security module per chassis and hav...

Hi all,I think i have a very simple question. We have a server making a lot of HTTPS connections to different IP's. We have a a specific rule in our ACL for this traffic. When building the firewall rules, i still noticed a lot of hits on the permit i...

Hi Guys              I would like to upgrade the software version of our ASA 5508-x .. Currently it is at level 9.6(4)3 but I see two directions that I could go::I could upgrade to 9.6.4.8or I could upgrade to 9.9.2.1which direction should I go? How ...

There are already a few of these questions like this on here but the solutions don't quite line up with mine so bare with me please, I'm still learning this. I have an ASA 5525x running 9.8bin. I'm trying to put a sourcefire module on it. I've downlo...

hi Team getting below error while enable IKE feature in FDM "unable cryptography types are currently restricted by the licensing status of the device" as per my investigation encryption license comes with base license to make IPSEC tunnel. LicenseDur...

I am new to ASAs, but I am trying to ensure connectivity between my internal LANs which hang off a subinterface. Any reason I am unable to ssh/ping 192.168.255.129 from the GreenNET network if the same security traffic is enabled? interface Port-chan...

Hi all, We are having trouble with SIP inspect on our ASA when using NAT. The call flow is IP Phone -> CUCM -> CUBE -> ASA -> ITSP In the majority of cases, this is working correctly, but in some cases (maybe 1 call in 50, but frequency varies), the ...

Dear all, I was wondering if you could give me some ideas about this issue.   We were alerted through our monitoring system that three interfaces on our ASA5515 (ASA 5515-X with SW) were having an issue: - asa_mgmt_plane - Internal-Data0/1 - mgmt_pla...

Hi   I attempted an upgrade of a ASA 5585-X cluster from v.9.1(2) to 9.10(1). The actual upgrade was fine but then we noticed that a large number of servers behind the firewall could not be accessed. This seemed to be intermittent, as some were ok ot...

I have setup WebVPN clientless SSL VPN so our users that are external login and there is a link to our company intranet website. Any of the links that exist on the website or are internal on our LAN/WAN work correctly. My problem is this website has ...

We had a scan run on our 5525X version 9.1(10) firewalls and one of the vulnerabilities  was "undefined CVE, missing httponly:Flag from cookie" has anyone experienced this or know of a resolution for this issue? Thanks