Network Security

Hi, Setup:Cisco Security Manager 4.14 Build 78 SP2ASA 5585 (multiple context mode)ASA v9.6(2) Problem: I am trying to implement rules for all Interface (global ACL); however, when I do a detect out of band changes on the CSM I get an error stating th...

Yesterday I tried to set a DMZ on Cisco ASA 5525   And i have a server in DMZ already  with 192.168.10.20 I have also a public IP of  154.72.196.42 from my ISP So when i hit the ISP IP  via internet to access my web server in DMZ  it gives me an erro...

Hi, We have FMC 6.2.3 that is constantly showing high memory utilization. It is installed on VMware with the minimum requirements.It is controlling two ASAs with not much traffic passing through them. Output from top  Mem: 7508840k total, 6830632k us...

Hi, i have a customer with two virtual FMC appliances which obviously dont support native HA, and the underlying hypervisor also doesnt have any failover mechanisms, and will never have this. As a workaround i thought about using the RestAPI with Pyt...

I have setup a VPN site to site between 2 firewall. On my site Y, public IP 210.666.111.7 with 1 local LAN (10.145.49.0/24) <--config is belowOn my site Z, public IP 216.55.11.82 with 2 local LAN (10.83.132.0/24 and 10.83.138.0/24) I am trying to rou...

I have a 5512 with Firepower installed.  I had some messages occurring periodically that looked like this. %ASA-1-323006: Module sfr experienced a data channel communication failure, data channel is DOWN. %ASA-1-505015: Module sfr, application up "AS...

Hi All, I have latest Java installed in my windows 10 machine. I am trying to launch ASDM but it never work.  ASA Version 9.8(1) , ASDM  7.8(1) [ERROR] CLI-PASSTHROUGH-DEBUG Inside doInitialProcessing:0 [SGZ Loader: launchSgzApplet] ERROR com.cisco.p...

HiDont think this is possible but will check, currently running Cisco Firepower 6.4.0 I know you can publish a website via NAT, but doing it this way needs a unique external IP for each site.  What if for example you only have one public IP but need ...

Dear all, i have a situation as mentioned below.I have two ASA 5525 in Active-Standby modeI have installed firesight Successfully.Situation is when i would like to go "Session sfr" for cli mode. it gives me a syslog massage which is "sfr is not respo...

Content Removed

I'm looking at deploying a pair of ASA 5515-X firewalls and would like to use contexts to create virtual firewalls for different purposes. I'd also like to add some resilience by configuring the pair either in active/standby or active/active (not sur...

Hello everyone,I'm aware CISCO ASA allows you to see bandwidth usage for outside interface for approx. 2 hours?Is there any step by step procedure I can use to store those logs permanently somewhere else? How can I check on ASDM the current BW usage ...

If we are using an ISR 4000 series as a DMVPN hub (DMVPN Phase 1) and want to run a Firepower sensor on a UCS-E series compute module within that module, will the sensor see spoke to spoke traffic bouncing off the hub.  If so, are we limited to IDS m...