ASA Traffic Zones
ASA Traffic Zones The Cisco ASA supports Equal-Cost multi-Path (ECMP) using Traffic Zones feature. Multiple interfaces (up to 8) are assigned to a Traffic Zone, which lets traffic from an…
ASA Interface High Availability
The Cisco ASA software image running on either Firepower or ASA hardware supports interface high availability using PortChannel/Etherchannel and Redundant interfaces. This post covers describes both solutions and provides information…
ASA Transparent Mode
The Cisco ASA software supports two firewall modes, routed and transparent. A transparent firewall is a layer 2 firewall that acts like a stealth firewall and is not seen as…
ASA TCP Intercept
An attacker can launch a DOS attack by flooding a host with thousands of TCP SYN packets, the source address would be spoofed with no way for the host server…
ASA Firmware Upgrade
ASA Firmware Upgrade This post will describe how to upgrade a standalone Firepower 1010 hardware running ASA firmware version 9.18.2 to 9.20.2. The software upgrade image will be copied to…
ASA NAT Exemption
The Order of Operations on the ASA processes NAT before determining whether the packet should be encrypted. In most scenarios an ASA is configured with a Dynamic PAT (Auto NAT)…