Network Security

Hello,   I've run a Pen test against our ASAx and it shows weak TLS, how do I fix this and what side effects might we get. We also use the Cisco Anyconnect for our remote users as I guess they use this?   https://www.ssllabs.com/ssltest   Screenshot ...

Hi at all,   we have a cisco ASA 5505 (ASA Version: 9.0(1)) and need make a Site to Site Connection with following parameters: IKEv2, Phase1Encryption: AES-256Integrity Hash: SHA512 (SHA Version 2)   Does this type of ASA support SHA2 512 ?   Thanks....

Hi I have to create connectivity for an external phone system say port 50000-51000 UDP from outside to a single host inside.   I would like to map the whole UDP port range  range from outside (hitting the external interface) to inside (pabx host 192....

How feature rich (if at all) is the FDM for managing a 2110 running latest FTD image? Are we able to configure the following -   * prefilter policy * Site to Site VPN * Check in to Smart Licensing for IPS licenses   Having only every used FMC, I am u...

how to find the list of sourcefire rule ids for a particular CVE Identifiers?

Hello,   Cluster Transparent Mode (2 units), only 1-2 flows to the same destination host are successful, all others fail. If I remove a unit from cluster (anyone), everything is OK. When I add a unit to the cluster, cluster is OK and healthy, but onl...

Is there any way in FMC 6.2.3.5, where we can Export all the Appliance Status Summary list along with their Appliance Name and its Status (Critical, Warning , Normal etc.)  & Description either in .pdf format or .XLX/.CSV format. I browsed System > H...

I have 2 internet providers that I test everyday. 1 200/200mbps thru rv320 reduce to 214/126mbps 2 1000/100mbps thru rv320 reduce to 364/139mbps How can I set rv320 to get better speed from providers.

Hello,    I would like to know more details about ZBF Inspections using "policy-map type inspect avc" option in IOS XE 16.9.1 This means that ZBF can inspect nbar applications , such as dropbox or ms-office365. What kind of inspections are performed ...

Hello,   rebooted my asa 5506x today. After that I am not able to connect to ASDM anymore.   Unable to launch device manager from ...   Logfile shows: Oct 25 15:28:12 172.16.1.46 %ASA-6-725001: Starting SSL handshake with client outside:172.16.7.150/...

Hey guys,   I have just started writing scripts in expect language on my ASA. I am able to create new local users (AAA) and I can remove them, but where I am struggling is creating Dynamic Access Policy and adding a username attribute to it. Here is ...

Dear All,   I am running some servers in my network which i want to have restricted access. I only want 8-10 specific users to have the access of these machines. i want this ip 192.168.12.30, 192.168.10.11, 192.168.11.15 to have access to the server ...