Network Security

Hi there,    I'm trying to see what traffic is hitting this particular rule:   access-list X line 1 extended permit tcp object-group SRC_X object SRC_X log debugging interval 300 (hitcnt=323) 0xb7788b5f access-list X line 1 extended permit tcp x.x.x....

I have 2 questions. 1. Is there a reason to have network objects created in a separate domain away from global if all our administrators have access to all domains? We are only separating them to get visibility separated in the dashboards and alerts....

Hello, I am unable to load the asdm from my workstation anymore. It has been awhile since I have used the ASDM on here because i usually just use putty to make changes.  I am however tying to setup a VPN connection and need into the ASDM.  Is there a...

Is there any way, or has anyone had any luck coming up with a working solution with the current verison of FTD for dynamic access policies on VPN Anyconnect clients using FTD firewalls? Can you use a DACL with ISE or a Radius server? Can you use LDAP...

ello Everyone,   We have a plain ASA (no ids/ips, firepower), we want to determine if the device is being port scanned. Did some quick scan (nmap) and all i see by filtering the device that im scanning it from is this   %ASA-4-313009: Denied invalid ...

I have a pair of ASA 5510s configured in active/standby mode. I have already configured the failover settings on the firewalls. Both firewalls are connected to a 2960G. I made a change to the interfaces on the 2960 to allow 2 mac addresses on each po...

Hi Experts,    We've multiple ASA's with the CSM (Cisco Security Manager) and not all firewalls are CSM managed.    Is there any way to find from ASA CLI that device managed by CSM...

I have been trying to configure 2FA for the ASDM UI for our ASA 5512-X. There has been no success and it seems that there is no software solution. Yes, there is 2FA for Any Connect and for VPN, but not for an administrator using ASDM. This is somethi...

I'd like to purchase the botnet license feature for my 5508, however, I've been unable to find it.  On CDW there are many licenses for every other model, but not the 5508.  Is another model's license compatible with the 5508?  

 I recently upgraded firepower 2100 FTD to ASA. But in ASDM there is no any tab for firepower configuration. Does this option support for FP2100 ?

For reasons that dont have a happy explanation, I am running 8.2(5) on a 5505 along side ASDM 6.3.1. That works well enough for what is a home lab to study some abomination that exists elsewhere that runs the same code. Ask no more about the why, I b...

Folks, I have an ASA and would like to see why my ipsec tunnel is not coming up.I enable logging. and then type in "debug crypto isakmp", but see nothing, in old pix could, it was so easy to troubleshoot but with 7.x code is there a good command to s...