Hi Team, Customer wants to have solution for below points using Cisco ASA SSL remote access VPN solution:   Should have feature to control end points: Detection of files, registry keys, running processes and Device Watermarks; Advanced Interrogator: (simplified granular end point detection, including detailed configuration information on over 100 anti-virus, anti-spyware and personal VPN solutions, including McAfee, Symantec, Sophos and Trend) Data Protection: Cache Control (data protection), Secure Desktop (advanced data protection); Includes jailbreak or root detection for iOS and Android devices.   I could find our Cisco SSL remote access vpn solution on ASA supports files, registry, process, AV using Hostscan. But could not get information on Device watermarks, data protection: Cache control and jailbreak or root detection for iOS and Android devices. Is it supported?   Should have access control features : User and group, Source IP and network, Destination network, Service/Port (On Demand and Connect only) Define resources by destination URL, host name or IP address, IP range, subnet and domain, Day, date, time and range, Browser encryption key length, Policy Zones (allows, denies and quarantines access and provides data protection based on end point security profile), File system access controls.  Some of the requirements will be fulfilled by configuring connection profiles and Dynamic access policy. But not sure of Browser encryption key length source IP & network ( not sure which source IP they are talking?)   Should support customised workplace/portal for smart phone and tablet browser.  – Is it possible to have customized portal for smart phone and tablet? Kindly provide reply on above queries.   ... View more

Hi Expert, Customer is looking for Active/Active deployment for NGFW 4100. The solution is to use firewalls in cluster setup and make A/A by using Etherchannel load balancing scheme.   Queries are: 1. Can it be deployed for two firewalls setup? 2. Will Master unit entertain user traffic? 3. Any issues/limitation for cluster in two firewall deployment?   Kindly share your thoughts on same.   ... View more

Hi Expert, Customer has below query: Does Fail-to-wire (FTW) interfaces come into picture when NGIPS is freeze or becomes un-responsive(hang). As per me, FTW should act when NGIPS is freeze.  Kindly confirm my understanding. ... View more

Hi Experts, We are proposing AMP 4E for servers (linux and Windows). Customer will have private cloud AMP & TG installation at one site. And Serers with AMP connector at another site. These two sites will be connected by Site to site VPN. So basically AMP connector will communicate over VPN to AMP PC & TG   Do you see any challenges or risks in above solution? ... View more

Hi, I just want to reconfirm my understanding is that ASDM can manage/configure firepower functionalities like IPS, File and URL on ASA55-X with firepower module. We need not to take FMC for firepower services management.  Is this correct understanding?   Also, can FMC manage ASA functionality on NGFW devices?   Regards, D.M.Gore   ... View more

Hi, We are working on a NGIPS solution that has requirement for more than 5 Gbps SSL throughput.    It is found out that 9300 appliance with two SM -44 modules can support it.   We are planning to cluster these SM 44 modules to get required SSL throughput.    Question is will 9300 appliance with clustered SM 44 modules support in-line mode IPS deployment, having in-line interface set?   As per my understanding, cluster deployment requires port channel interfaces and does not support individual interfaces.   Kindly confirm the possibility.   ... View more

DO we have any material on AnyConnect and Juniper Pulse comparison? Need it for customer network. ... View more