Hi jwnetworker , try with capture cap1 type asp-drop all match ip host [IP] any   Regards.- ... View more

Hi Bolish, here some links for you.   ASA upteade: https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html   ASA features: https://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa_new_features.html   Regards.   ... View more

Excellent!! ... View more

Thanks kaisero. ... View more

I hope you find it useful for your problem. Regards.- ... View more

Hi abhijith891 , you could do from CLI (as well ASDM): show traffic, show interface outside and show perfmon for check what traffic it's generating alarms. Also, you could check if you need block some traffic that you don't need. Sometimes some users don't' care about bandwidth... And finally, the worst, you should check if your device it is the correct one for your environment. The following links should help you with troubleshooting. Troubleshooting: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115985-asa-overrun-produ… https://supportforums.cisco.com/t5/security-documents/asa-oversubscription-interface-errors-troubleshooting/ta-p/3125308 https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113185-asaperformance.ht… CLI: https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s13.html#pgfId-1332624 https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s11.html#pgfId-1532237 DataSheet Throughput https://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-73391… Regards.- ... View more

Nice. ... View more

Hi duahimanshu816, I don't know what version of FW do you have but, if you are asking about ASA, you can use object-group service for ports and object-group network for IP. for example: object-group network remote-lan network-object host 10.10.10.1 network-object host 10.10.10.2 network-object host 10.10.10.169 network-object host 10.10.10.175 exit object-group network local-lan network-object host  172.16.16.10 network-object host  172.16.16.50 network-object host  172.16.16.174 exit object-group service VPN-ports service-object tcp destination eq 80 service-object tcp destination eq 8081 service-object tcp destination range 6000 6002 service-object tcp destination range 5500 5560 exit then you can use remote-lan, local-lan and VPN-ports in your ACL. access-list ACL-IN extended permit object-group VPN-ports object-group local-lan object-group remote-lan access-list ACL_IN extended deny ip any any https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/acl_objects.html#pg… Regards.- ... View more

Hi  Alex Li . It is strange. Is this a new deployment? Have you tried updating?   Regards.- ... View more

Hi. Here is the guide https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower-management-center-display-acc.html Regards.- ... View more