Network Security

Enable Context Mode on Cisco ASA with direct Internet Circuit

hi, i have an internet circuit directly terminated on ASA 5525-X that is running in single mode. site-to-site ipsec VPNs tunnels and NAT services are running on this FW. recently there are a number of customer sub-interfaces being added and i'm cons...

setting up firepower module, question about interfaces

Hi all I'm in the process of upgrading the firepower software on a Cisco 5525-X. I have updated the boot firmware to 6.2.2. Once I get into the module using the module sfr command i then enter setup to configure the ip address for the firepower mod...

NAT for web server in DMZ

Hello ! I am doing NAT lab in GNS3 with ASAv & trying to allow web server in "dmz" zone access from "outside" and "inside" zone by using "object nat". But both outside & inside failed access to DMZ's web server. The acls are already in place. I've ...

Resolved! ASA5580 ping and port forwarding challenge

Hi folks, I have 5 of Cisco CMTS in my LAN with private ip addresses of course. The company I work for hired another company in order to monitor (SNMP) those 5 CMTS and they asked me for a public IP address and port forwarding to add CMTS's to their ...

Resolved! Problem Licensing ASA 5505

HI!I have a cisco 5505. I bought the cisco asa 5505 with base license.First I bought and install a "L-ASA5505-10-UL= ASA 5505 10-to-Unlimited User Upgrade License" and then I bougth and install a "L-ASA5505-SEC-PL ASA 5505 Sec. Plus Lic. w/ HA, DMZ...

Resolved! Password Complexity for local accounts on ASA and Routers

I know it is possible to set minimum password length on these devices, but can we configure password complexity options for local accounts on an ASA 5508 and/or an IOS router (i.e. ISR 4321)? I am in the middle of an audit, and need to provide offi...

Sourcefire command reference for hardware disk issues

Hello everybody,I have a FS3500 (v4.10) with the System Error LED (exclamation triangle) and 1 hard drive LED in amber light.The System Error LED in amber could mean RAID Controller and/or Raid Battery and/or Hard Drive issues, however having both Sy...

Removing licence from FMC and rehoming to ASA5506x

Hi , I have a number of asa's on the fmc and have used up all the licences available so i have rehomed a number of asa 5506x's back to localally managed by the asdm. My problem is on the fmc i have 26 asa5506 licences and 21 in use . How do i know...

Resolved! Cisco Firepower Management Center v 6.0.0 default password changed

FYI - when setting up the Cisco Firepower Management Center virtual appliance v 6.0.0 the default password changed from Sourcefire to Admin123. All documentation for 5.4 says to login with username: admin password: Sourcefire I had to call TAC beca...

Firepower Not updating groups

Hi, I have passive and active authentication which is running the network. When i change a group of the users they are not reflecting in the firepower. I am downloading the user details in the relam manually and automatically as well. Has anyone eve...

Intelligent Application Bypass - is it working?

Hi, Fighting with elephant flows and at the moment I am losing the fight. I'm trying to set up the IAB feature to avoid inspecting long lasting/high bandwidth flows as they are spiking the CPU, but I cannot seem to get it working despite trying diff...

Resolved! ASA 5506-X ASDM Access

I am setting up an ASA 5506-X and having trouble getting ASDM to launch. I have gone through several posts in the forum of others experiencing issues with ASDM launch but no matter what I try, I cannot seem to get it to work. Relevant portions of ...

Resolved! ASA 5506 - single IP (pppoe) port forwarding

Have a client with an ASA 5506 - they have a single public static IP address obtained from the ISP's router through pppoe. I need to allow access through to their mail, web and FTP servers, I've had no issue setting this up on clients with multiple p...

Resolved! Cisco Firepower Management Center 2500 Content Filtering

How to do Content Filtering using Cisco Firepower Management Center 2500? Thanks. Ishmail

FMC 6.2 Access Rule Empty Object Group

I am wondering how ASA/Firepower handles empty object groups in a rule. For example, I have a rule with an object group for destination; all working fine. I then have to make changes to the object group, and it turns out all IPs get removed from th...

Network Security

Forum Posts

Enable Context Mode on Cisco ASA with direct Internet Circuit

setting up firepower module, question about interfaces

NAT for web server in DMZ

Resolved! ASA5580 ping and port forwarding challenge

Resolved! Problem Licensing ASA 5505

Resolved! Password Complexity for local accounts on ASA and Routers

Sourcefire command reference for hardware disk issues

Removing licence from FMC and rehoming to ASA5506x

Resolved! Cisco Firepower Management Center v 6.0.0 default password changed

Firepower Not updating groups

Intelligent Application Bypass - is it working?

Resolved! ASA 5506-X ASDM Access

Resolved! ASA 5506 - single IP (pppoe) port forwarding

Resolved! Cisco Firepower Management Center 2500 Content Filtering

FMC 6.2 Access Rule Empty Object Group

We want to celebrate the October Spotlight Award winners!

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

Is there any simulator where I can test ips custom signatures?

WCCP on ASA: few basic questions

Can't ping ASAv after upgrade

Firepower running ASA code using the FXOS API

asa5506W-X AP reimage/reload

Upgrade from a 5505 ASA

Smart License usage is out of compliance.

FMC/FTD VPN issue

FTD 2130 Ports

SSL Version 2 and 3 Protocol Detection in cisco switches