Network Security

Hello,   I'm curious to know if there is a way to block applications that have been classified by NBAR2 using zone-based firewalls on the ISR platform.   Here's what I was thinking:   class-map match-any CM match protocol bittorrent match protocol ...

Hi guys, i just read in FP documentation that bypass mode will have a few packet drops when the FP chassis has been rebooted? Is that true and what is reason why it will have few packet drops? Thanks

Dear Team, Tomorrow customer licence will be come Please guide me & share the link. How to renew firewall licence step by step please guide with proper step.   Model No :- ASA5506-K9 Serial No:-JMX2133YODX   Thanks & regards, Sachin  

Attempting to establish tunnel to Palo Alto keep getting failure:    Received encrypted packet with no matching SA, dropping   My cisco crypto map entry: crypto map outside_map 115 match address outside_cryptomap_115crypto map outside_map 115 set pee...

We have an Active/Standby configuration with 2 ASA5506X's with ASA version 9.6(4)17 and ASDM Version 7.6(1).  We have stopped subscribing to Firepower because every once in a while, Firepower basically brings the throughput of the network into single...

Dear all, We received a new 5525-X appliance this week and after verifying that it powered without issue on the bench, I racked it and began applying a very basic config to test.  I decided to setup the FirePower (SFR) module via ASDM but found that ...

Hello everyone   We are planning to replace for one of our customers the ASA 5520 firewall with the Firepower 2110. The customer is using on the existing firewall (ASA5520) a CWS connector.    Will be possible to use on Firepower 2110 the same licenc...

Hi, May I know how to get the serial numbers of the power supply modules connected to the sensor using the CLI? Thanks

Hi Everyone, I am in the process of setting up ASA for home lab . In the process have attempted to configure inspection of icmp traffic and was following a doucument I  got online. At a point,   when enter                         class-map type inspe...

Hi folks,   at one of my customer´s sites I was confronted with a split brain ASA failover situation. Unfortunately the SFP of the failover link was broken. Both firewalls did not "see" each other while the failover link was broken.   I did not find ...

Hi all,   today I had the Problem that my ASA FW cluster told me: Lost Failover communications with mate on interface xvc   Fortunately, it also told me:  Testing Interface xvc Testing on interface xvc Passed   Also, when i checked the Status etc., e...

We're deploying two 5516Xs tonight, and I had taken for granted the config because I couldn't pre-assign IPs because they will be replacing our current firewalls that use the same IPs.   So I've held off until today, and now we're staging things and ...

Dear Team, Currently we have two Site to Site VPN Connections between HO (Cisco ASA 5515-X) and Branch office(Fortinet). ISP 1(HO) Connected to ISP 1 (BO) ISP 1(HO) Connected to ISP 2 (BO) We need to achieve Redundant auto fail over of Site to Site V...

Hello,   I'm trying to configure a firewall rules that allow the dcerpc communication between my Active Directory server and Domain Computer.   I've got some problem to push GPO from the AD because it use rpc port (port n°135) but after use a new por...