Network Security

Hello. What is difference between CON-SNT-A15K9 and CON-SNT-A15K8. This is contract for cisco asa 5515-x. If i understood correctly, K9 means that the device supports encryption aes/3des. And K8 - only des encryption.And if i can see smth like this  ...

Hi,currently our FMC and modules are running on 6.2.3.9 version.I can see that newest version is 6.4.0.2.How can we do an update to newest version, do we need to do it version by version or we could skip some?I guess that we can't go just directly to...

I am trying to set up an AD realm.  The directory test passes and I think I have the realm config correct, but when I try to user download, the job completes but finds no users or groups.  I have the base and group DN set for the top of the tree (a v...

Hi, I have a customer looking to use FPs as their VPN head-end devices but I cannot find any throughput figures (probably as the feature is relatively new).IPSec throughput information is readily available.The Performance Estimator only provides IPSe...

Dear Experts, Good morning, we have requirement where users are granted remote access VPN via L2TP using microsoft native client. We want to enable 2FA for remote access VPN. As per the reading it seems that we need to go for thrid party 2FA solution...

Hello Experts, I have 2 x FTD2110 configured in HA and they managed by FMCv. Both FMC and FTD are running on code 6.2.2. I have configured a PBR with 'match list' and a 'set next-hop' command and was able push the flexconfig to FTD successfully and P...

This is really a weird one.  I have a VPN tunnel, up/online between ASA5525-X and ASA5505.  The problem I'm experiencing is on the ASA5505 side. The protect network, these are not actual adresses, 192.168.1.0/24. Very small 4 host that are statically...

Hi,I want anyone able to get an IP address from the corporate network, that does not have the Proxy client on the machine, to go via the Proxy web site when using www or https. I have a router facing the ISP and the firewall behind the router providi...

I'm installing a new ASA 5510.  I tried to configure a simple setup and get that working before I deal with DMZ and VPN.  I can't even get our internal subnet to access the internet on the outside interface.  My internal subnet is 192.168.0.0/24 and ...

I am new to Firewall management and need help with the following ports on my ASA 5508-X Firewall. Thanks in advance! Port Direction TCP UDP Usage 22 Out Yes No Technical Support Services 25 In/Out Yes No Email and ...

Hi All,Can someone explain how the ASA uses the standby IP in a Active/Standby config. I have always configured the devices like this as per cisco design. Tried to look into this further but unable to find a definitive answer. When the PRIMARY fw fai...

Hi Guys,I just read in the documentation the purpose of the Ping Timeout option in the DHCP of the FTD, in this way, it avoids IP conflict.May I know how effective of this compare of doing IP reservation which is not supported of FTD? Let us say, I h...

I have recently dropped an ASA 5512x firewall in transparent mode.in a network between an 1841 router which connects to the internet and an inside network which is on a class C network. All that i previously  needed was to allow tcp traffic on port 8...