Network Security

Is it possible when dealing with anyconnect for the ASA to read in the domain suffix before a username and know which radius server to send it to in a radius server group? I know you can do this with different connection profiles but I am not trying ...

Hi!   I want to replace my service provider Zyxel router with something more manageable. I have 2960 and 3650 switches I can use as layer 3 switches. My concern is the security when implementing a layer 3 switch over the stock router with integrated ...

we have centralize ASA 5525 and we want to create vpn  with location 1 and 2 we already created site to site vpn with location 1  gateway is 134.x.x.x now we want to add anoter site-to-site vpn with location 2  gateway of location 2 is 62.x.x.x.x  th...

where do firepower service policy apply is better? and a list of question about firepower?outside only? inside only? or both outside and inside ?   i find that firepower access policy can not choose which interface it apply where to set this?   if no...

Been frustrated with this all day ... here is my config:     : Saved ! ASA Version 9.2(4) ! hostname ciscoasa names ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface E...

Hi team,   I am having an issue with the syslog configuration of those appliances below: - ASA-5510,  Software Version 9.1(5) - Device Manager Version 7.3(2)   The issue is:    Syslog configuration     After clicking OK, the result appears with TCP, ...

Hi, Is there any limitation on policy rule numbers on FMC?  Customer wants to order FMC that will manage about 12 FTD and each FTD will have  about 1 million policy rules.   As per my understanding, it should not affect FMC. FMC will support any numb...

Hello,   I have 3 ISPs coming into my ASA 5505-X.   One of them is already configured by the previous sysadmin, i have never touched the configuration and i'm afraid of doing something that may affect it.   I would like to configure the additional tw...

I remove firepower service policy at outside and only apply at inside4   Allow country United States   Traditional ASA itself inside4 allow UDP 53 and TCP 53 and any IP address with TCP 443 and 80 but can not browse duckduckgo   Attached setting  

It seems we don't have the "LOG" entry on any of our access lists. Is there a way to globally turn this on so it logs all access lists to the syslog server or do I have to enter this one by one on the ASA command line or ASDM?

I am attempting to forward logs from my ASA estate to a Skybox server to monitor the useage of the ACL. I have followed all of the relevent steps as defined below but there is no sign of 106100 messages in the either the sent syslog messages, ASDM lo...

All of our Firepower Management Centers stopped downloading updates. VDB updates etc. are also not working. Internet connectivity is fine. Error message trying to download updates: Download updates failed: Error parsing the update file. The file may ...