As we know, an ACL can get really long especially when it comes to blocking malicious sites or IPs. Would it be better to block via a IPs sensor/device? If so, what are the main reasons why?
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,642) -
Cisco Bugs
(62) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(150) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(50) -
Cisco Secure Firewall Management Center (FMC)
(265) -
Cisco Secure Firewall Threat Defense (FTD)
(313) -
Cisco Security Cloud Control
(17) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(22) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(47) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(265) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Manager (FMM)
(1) -
Firewall Migration Tool (FMT)
(38) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,581) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(325) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(94) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,594) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,793) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(13) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(646) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hi guysI have a requirement to separate 5 VRFs into nexus VDCs.While each VDC will host the relevant VRF and terminated on the Firepower FTD.In regards to the Cluster Control Link, Since the firepower will have specific interfaces into different zone...
Hello can anyone provide there assistance in guiding me as to what I can do to resolve this issue if you have experienced this issue in your career. I'm at a complete lost. I would be grateful. I try to fail over to the second same issue took place. ...
What is the best practice of having VRF configured on nexus 7k, with several subnets(VLAN interfaces) but termination on the firewall? At least how to have those configured from the firewall perspective?I have different security zones to be configure...
Hi all,I know the purpose of SSL certifcates, but i'm far from a expert on that side. I think i have 2 simple questions:When i need to renew a certificate, do you always have to create a new CSR?I don't understand the purpose of Trustpoints. When you...
I am looking to create an IP SLA to send constant pings to a remote device to Outside of the ASA Outside interface, send a syslog if pings fail, but take no other actions.Here is what I got so far but I am not sure of syslog part. sla monitor 100 ty...
Hello Pro,Would you please tell me what is the maximum of l2tp tunnels supported by asa5500. Thank you.
Resolved! Accesss-group in ASA 9.x
Hi All, I am learning Cisco ASA. I have queastion in applying ACL. 1.access-group <access-list name> in interface <interface name>2.access-group <access-list name> out interface <interface name>In the above syntax, I know where i have to use the fir...
Hi I tried to stast the ASDM but got an error message. Unable to launch device manager from Hier is the running configuration from ASA and Java output / attached files/ Thank you in advance
Resolved! ASA5520 inside shared interface
Dear All,I have two asa5520 configured in multiple context mode, the two context share both the inside and the outside interfaces.I have configured in the system context the mac-address auto to assign a unique mac to each sub-interface.When I try to ...
We have 2 FTD 2110's in a HA pair and upgraded the FMC and FTD cluster to 6.2.3.13 (build 53) and when the the first FTD rebooted it no longer communicates with the FMC. I found in the event log that it appears that events are being blocked between t...
I'm trying to set up a remote small office with an FTD in the coming days and have been informed that we will need two Public IPs. 1 for the outside interface & 1 for management interface. Is that a correct requirement for an FTD? Are there any kno...
I am doing an assessment for the following devices, for which EOL dates have been announced.ASA5515 ASA5585MC1500Basically I want to identify steps to remediate them to a supported level. I had a look at the EOL pages for each of them and had some qu...
Hello,We own a Rv340 Router in our company.Since I upgraded to Firmware 1.0.02.16, I can't figure out how to change the priority into the rules of Policy Binding Table.Previously, I used to : edit --> change the number of priority and click on "Apply...
I am adding a new branch and connecting it by VPN to ventral site. The central site is the hub site for VPN tunnels. The issue I am facing is that the new branch's Internet link has MTU 1452 (because of PPPOE) and the MTU of outside interface in the ...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM | ||
| 08-10-2026 08:58 AM | ||
| 08-10-2026 02:48 AM | ||
| 07-22-2026 05:00 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
