Network Security

Hi All   Just a quick sanity check, basically the requirement is that we NAT all our traffic to 1 ip address when going over the vpn tunnel. The VPN is built on a natted source network of 192.168.1.0/27 , I have set a NAT rule to dynamically NAT all ...

Is there any documentation that states if a Cisco ASA fails open or closed.

Hai   I have problem with asa not allowing passive ftp directory listing .code 9.6.4 tried with and with  out passive command Also  with inspection and with out show conn TCP outside 217.160.123.90:65134 inside 172.18.14.27:52034, idle 0:00:04, bytes...

Hi Everyone, I am facing some weird issue where ping traffic works fine , however tcp/udp 5060 traffic fails. There are 2 interfaces configured as below - ASA/pri/act(config)# sh run int Ethernet0/2.1097 ! interface Ethernet0/2.1097  vlan 1097  namei...

Hello,   We are using the IPS module on the Cisco ASA 5525-X Firewalls and we’re running version 6.2.0.6. We would like to forward detailed logs to a Syslog server. We followed these procedures: https://www.cisco.com/c/en/us/support/docs/security/fir...

Good Morning   I have to migrate firewall Checkpoint configuration to a Cisco ASA 5585X device.   Checkpoint has many "accept", "drop", "encrypt" rules. But I could find some rules with action "Client Auth". By Client Auth rules, a user in an user gr...

Hey Guys; I've seen to be having an issue with this ASA 5510 FW; I don't wanna use NAT for inside/outside; since im natted on my router; I just want this FW to inspect packages and denied packages; that's it; when I check the logs on the 5510; it kee...

Hi,   we're looking info about to configure a cluster of FTD 2140 in Active/Active with some firewall context enabled. Obviously this all through FMC vm.   Which are best practices to do?   Thansk!    

Hi,    I try to allow communication for one specific IP to connect on the Internet in only specific time ranges.   Monday to Friday 7:00PM to 8:30PM.   As I know I not possible to start a new communication outside of this time window.  But I was expe...

Hi, I want know Packet Latency value (IPS,AMP,URL enabled 1 by 1 or combined) when I deploy Firepower 4110 or 4120 device Inline mode.   any public or internal document?   I will compare with other vendors   regards zafer

Hi Guys   After a power outage I keep receiving this error message on my ASA-5516X with FirePower services:: "/ngfw/usr/local/sf/bin/pmmon.sh: line 77: /proc//comm: No such file or directory/ngfw/usr/local/sf/bin/pmmon.sh: line 77: /proc//comm: No su...