I found an issue after replacing a WatchGuard firewall with a Cisco ASA 5516x. The WatchGuard was only configured with IPv4 on all of its interfaces. No IPv6 addresses were…
Read More
Cisco announced on July 10th, 2019 that there is a vulnerability in the cryptographic driver for Cisco ASA software and FTD software that could allow an unauthenticated, remote attacker to…
If you need to upgrade the ROMMON version on your ASA, here is a quick guide. Note that you cannot downgrade ROMMON versions, only upgrade. Here are the steps to...
Read More
So I found an event today trying to get a remote code execution on one of the servers today. The attacker was from Russia address 5.227.15.91. I did a quick...
Read More
If you have a new ASA and would like to upgrade the ASA and ASDM image before configuration, here’s a quick walkthrough of how to do just that using the…
Here’s how to set up SSH on a new ASA out of the box, as well as set up local authentication. Step 1: Configure aaa to use local database for…
Here is a unique issue that happened to me when setting up a pair of firewalls. Symptom: I had two firewalls sitting in the same outside network. Both firewalls could…
So we’ve run into this problem a couple of times. The symptom is DHCP being issued from a Cisco ASA (multiple devices/versions), but not being “accepted” by the DHCP client. …
This blog is to help explain the steps for setting up Anti-Malware Protection (AMP) on the Cisco Security Management Server. The point of AMP is to stop malicious files from...
Read More
Description: This document describes the process of creating an IPSEC tunnel between a Ubiquity USG and a Cisco ASA via an on premises Unifi controller. Unifi Configuration: This setup was...
Read More
