Securing FTD TLS Ciphers
When using a Cisco FTD firewall for SSL/TLS Remote Access VPN, the appliance is enabled by default with TLS versions 1.0, 1.1 and 1.2. TLS versions 1.0 and 1.1 are…
ASA Interface High Availability
The Cisco ASA software image running on either Firepower or ASA hardware supports interface high availability using PortChannel/Etherchannel and Redundant interfaces. This post covers describes both solutions and provides information…
ASA Transparent Mode
The Cisco ASA software supports two firewall modes, routed and transparent. A transparent firewall is a layer 2 firewall that acts like a stealth firewall and is not seen as…
ASA Service Policies
The Cisco ASA firewall, Service Policies use the Modular Policy Framework (MPF) to provide a flexible way to configure ASA features, such as connection settings, inspection, QoS, redirection to service…
ASA TCP Intercept
An attacker can launch a DOS attack by flooding a host with thousands of TCP SYN packets, the source address would be spoofed with no way for the host server…
ASA NAT Exemption
The Order of Operations on the ASA processes NAT before determining whether the packet should be encrypted. In most scenarios an ASA is configured with a Dynamic PAT (Auto NAT)…