Network Security

I am trying to setup patterns in Logstash(ELK stack) to monitor FirePower logs.  I am trying to find a documentation that shows all the syslog messages that FirePower can produce to create a pattern file for them.  What I am looking for is similar to...

Hi all, The problem that I'm facing is how to have a trace about vpn session that are opened throw our asa5515-x and put them in readable file like csv file so that IT Administrator can use it. Syslog Software like kiwi deliver logs but these are not...

We are getting this warning several times a day and sometimes the duration is several hours untill it is cleared from healt monitor. We are running virtual FMC and purly ASA-X with FirePOWER. FMC at latest and greates 6.0.1.1 and ASA's @ 5.4.0.6, a c...

Hi, We have a customer that bought an asa5525-x with firepower, now this is the first time i need to setup an asa with firepower and i run into a small issue. ASA is up and running, Firepower managment Server is up and running and connection betwee...

Is there a work around for firepower vmotion. I vmotioned my firepower VM and network traffic stop. I had to migrate the VM back to the initial physcial host for traffic to flow. My concern is: 1. What if the physical server the VM resides on stoppe...

Hi All,I have tried the wccp http redirection on firewall with squid server and it runs ok then i have tried the wccp https redirection on firewall, its not working. the request goes straight through the firewall. Is the wccp supports https redirecti...

May i know the packet flow of the ASA when the packet comes from outside ?

Hi friends. I'm sorry if this is basic, but the Pix world is something I'm not very confident with.The attached configuration is of a Cisco Pix that was used at a remote office. It contains: Inside traffic 172.16.0.0 Inside Nats to: 10.54.14.0 VPN tu...

What is hairpinnig in ASA and how its workes. can anyone explain me ?

I am working off of Security Manager 4.8.0 Build 182 with Pro License and when I log in from the client I am not allowed to add a device.  On the GUI if I click on "Device" to see the device view it doesn't progress to that screen.  Same when I try t...

I have ported over configuration from a Production ASA5520 that has anyconnect, hair pin vpn, split tunnel & a ton of NAT.  I have ported over this configuration to an 5545-X and I am doing the cut over to this new 5545-X in a couple days. I have acc...

Hello! I deploy FTD on ASA 5515 latest 6.2.. I try to monitor applications, URLs...I can just open system dashboard ....al other does not have any data. I have simple access policy to deny some URL categiries and allow all. For those rules I have t...