Network Security

NAT cmds below will nat source & dest to which network-X or net-Y or net-Z? What is the reason so many identical "nat (inside,any) source static net-10.1.1.0 net-10.1.1.0" But with different "net-X net-X"?   nat (inside,any) source static net-10.1.1....

Hi all I need a support to understand some feature of Cisco FP 9300 appliance: - the virtual contexts are supported? If yes, how many context for each appliance? - the QoS are supported? The last firmware is compliant to RFC 2474?   Thank in advance

Hi Team ,    While taking backup from FMC , we are getting an error that Database integrity check failed.   Can you please let us know what logs are required from FMC CLI to check where the backup is getting failed.

Hello, How to filter the image search result with Firepower? Example: don't display the image result of nudity or porn. The URL is aready blocked but when using the google search, the image or the video still appears. We want to block it from Firepow...

Hi, We have a FTD and want to use SSL Decryption to protect my Exchange Server from outside, but after I configure the SSL Decryption, I got the Error Message: " not decrypt unsupported cipher suite", how can I find which cipher Suite not work? is th...

Hello! I have a question about FTDv and its management interface.  During cli installation wizard I assigned static ip address to the management interface. What interface it should belongs to?  In show interface ip brief Management interface has n...

Hi   I have just joined this forum as I feel I can learn a lot from it, and hoping you all can help me on my first post (hopefully posted in the correct place?!)   I am fairly new to Cisco (I have had experience in old jobs, however had never had to ...

Hello, I have a pair of ASA5515-X's with firepower modules installed. They are managed by an FMC1000 appliance.   Each time I send traffic through the firepower unit my client experiences a huge slowdown in backup traffic. The backup traffic is from ...

I need some information about the output from the sho conn command on my ASA 5506-X.   The output looks like    TCP outside: 64.74.17.129/443 (64.74.17.129/443) inside_2: 192.168.1.10/57595 (62.128.198.254/57595), flags UxIO , idle 11s, uptime 2D23h,...

Hi all, with network topology descrived in this topic:   https://community.cisco.com/t5/firewalls/asa5506-x-enable-comunication-between-vlans-and-remote-managment/m-p/3391711   2x isp routers for internet access with dhcp on lan interfaces and 2 diff...

Hi,   We have configured email alerts to send two mail address in our company. Only one of them is receving these mail alerts, but not the another mail account. The relay host is the same for both mail address. So we dont know we are not receiving th...

Working on a network where the 5506's outside interface is w/in a /26 (ASA is A.B.C.32 w/ a default gateway of A.B.C.1, which is the ip of a router internally).  The /26 is broken down in a way that the users of the ASA (org 1) are allowed to use .32...

Hello, Gents, just I wanna to know if it works, Static Virtual tunnel interface with IPSEC ikev2 between to ASAs? since I read before in article this function an in Cisco IOS only,   can you plz advise as well provide me with an article to make this ...