Network Security

2130 HA pair running 6.4.0.1. I am setting up outgoing NAT/PAT. There are several internal interfaces with their own private subnets. My intent is to IP masquerade all outgoing connections from internal private subnet A to a pool of public IP's on my...

Hi All: What steps do I need for the below scenario to happen. I want to have a site to site connection but instead of having private addresses via the tunnel I will have one side have a private address being natted via static nat and then that stati...

Join the Customer Connection program to participate in our July 10 session on Cisco Defense Orchestrator (CDO) briefing.  CDO is a cloud-based security policy and device manager that simplifies and unifies policy across your Cisco firewalls. In this ...

Hi everyone My company using WSA and ASA with firepower, flow under the action of WCCP, be ASA redirect to the WSA, when the user's endpoint access to the Internet, I view the event on firepower, found that the source address is the address of the P ...

i have a ASA5520  with a ASA-SSM-10 with asa version 8.2(2) and asdm 6.3 , i need to upgrade it to the lastest which is 9.1.7 and asdm 7.8.1 , my question is that can i jump directly to these versions? or is there intermediate versions?also should i ...

hi. we configured firepower that scan new detected ip host using nmap. it works as expected. but when firepower scans host it is shown on event and Initiator User seems to be netadmin. Shouldn't it only depict Unknown for Initiator user? How we could...

Hi there, I'm reading the list of topics for the IINS 210-260 exam here: https://learningnetwork.cisco.com/community/certifications/security_ccna/iins-v3/exam-topics I'm using the official cert guide and if I check Appendix B for exam updates some co...

GreetingsI've been running ASAs with Firepower services 5508 up to 5525s for some six years now and would like to know if there is some consensus out there on where the majority of ACL should be implemented. I've always had an idea of keeping the bas...

Hi , Pls tell me Is it necessary to have 8GB DRAM and 8GB Flash memory for IPS/IDS functionality to work on CISCO 1100 Series. If yes does it mean only C1111-X8P (X indicates advanced security features) is only product with IPS/IDS. We cant use C1111...

In Release Notes for the Cisco ASA Series, 9.7(x), there is a mention below:Dynamic RRI for IKEv2 static crypto mapsDynamic Reverse Route Injection occurs upon the successful establishment of IPsec Security Associations (SA's) when dynamic is specifi...

Hi guys,I would like to know does any of you have experience with Firepower 2110. I found that neither BVI (on routed mode) and redundant interface are not supported on this device. So, what the replacement would be? How to enable redundancy?Thanks i...