Hello. I would like to share my experience fighting with SPAM and bruteforce. Some time ago I realized I have a lot of connection with bruteforce attempts and lot of SPAM connections to my mail server, another issue was having lot of web connections ...
Hello! in Firepower Threat Defense Device Manager you could configure two things: #1: NTP Servers to use #2: Management interface: use data interface I configured an Identity Realm which works fine on the data interface, but not the NTP. The NTP ...
I have setup the below for a primary tracked default route, and then a floating static default route using the same interface (pointed to two different upstream routers). When the primary goes down, the floating static route is inserted. Problem is, ...
Can anyone tell me the technical differences and features between the ASA and ISR Firewall? I am in a technical sales position and I find it difficult explaining the difference between the two, when pressed. Especially in a ASA5505/5510 vs 1941/291...
I'm not sure ...can I shutdown the interface on standby unit?
So, I have the ASA 5505 Firewall. I generate an ACL to block three IP. Those IP are from outside and are generating fraffic with an internal server. After aome hours I still get traffic from those IPs as you can see in the nex image: The IP 18...
I have a lot of mail alert from FireSIGHT systems detail as bellow : [133:27:2] dcerpc2: Connection-oriented DCE/RPC - Invalid major version [Impact: Potentially Vulnerable] From "10.31.246.51" at Thu Mar 31 01:23:52 2016 UTC [Classification: Porn...
How do I allow my outside interface to be pingable from the outside? I've tried configuring an access to allow icmp on the outside interface with no success. I'm still seeing the deny inbound icmp type 8 code 0 messages in the syslog. Thanks.
I have cisco asa 5525x in my network and I want to block users to social websites i.e. ( youtube, facebook, dailymotion etc etc). I also want to block web access if someone use vpn and try to access these sites. I am new to asa please guide me how I ...
Hello, I need to translate a custom RDP Port. I'm a little bit stuck... Here the rules : object network RDP-Server nat (inside,outside) static interface service tcp 3389 33890 access-list outside_access_in extended permit object RDP-Service any ...
I received the warranty replacement ASA for the faulty clock issue recently. In the box, there was no control license PAK. Also, I had an active AMP subscription on my existing ASA - how do I transfer it to the new device? Thanks.
Hi guysI have a problem right now, in fact I was searching for all the forum and I couldn't find any topic that could help me. Let me explaing you the situation: I got 2 firewalls which are connected as failover, the problem is with the ACTIVE device...
I have deployed the FMC with version 6.2.2.2. I have an issue that I can't modify the password option with default "admin" user. I have created another administrator account with no problem. I have tried to login the newly created user and try to mod...
I can see a connection using "show local-host" and "show conn", however, I cannot trace it back to the (Identity firewall) ACE that was used to allow that connection. Is there a way? Each ACE (shown using "show access-list") owns a unique hash code, ...
CISCO SYSTEMSEmbedded BIOS Version 2.0(14)1 15:16:31 01/25/14USB storage device found ... SMART eUSB USB DeviceTotal memory : 12 GB Total number of CPU cores : 8 CPLD revision 0008hCisco Systems ROMMON Version (2.0(14)1) #0: Sat Jan 25 16:44:38 CST...
