Network Security

Hi, guys, The problem may be found, it is due to the service-policies do not work on VLAN1 and VLAN5. I tried to clear stats counters of the service-policy, but only work on vlan160....which means service-policy on VLAN1 & VLAN5 don't work. Anyway to...

I have 2 NGFWv/FTDv devices deployed in Azure. They are sandwiched between 2 load balancers to provide "HA" per the video series that everyone watches.   https://www.youtube.com/watch?v=Zjc9hmc2m68   My question is when providing access to servers be...

I have a remote 5505 easy vpn connection back to a 5520 (IPSec 3DES).  I am getting multiple complaints of slow internal network speed over the vpn tunnel.   I have posted my config below; is there anything I can look at or troubleshoot?ASA Version 7...

Is this possible?   My goal is to block ping reply from ASA outside interface, but to allow ping reply to group of hosts to the outside interface   my config right now   icmp permit any unreachable outside   with the above config, the ASA outside int...

During  the VPN negotiation, does anyone know of a way  to force a IKEV1 connection with a policy that has stronger encryption, say AES-256, DH Key 5, rather than reading top down and connecting on the first match, with may be 3DES, DH Key 2.  I know...

Hi: FMC  version: 6.2.2 FTD 2130   Has anyone ever seen this health global alert before please ? :   Firepower Disk Usage:0 - Disk  Drain of unprocessed events from Connection Events…    As a result I don't have any eventlog in the FMC   regards,

I'm trying to get some information on how to properly configure the Mgt ACL in ASDM/CLI for management access to the ASA. When I configure it to allow connections from my IP address and then attempt to SSH to it I get a "connection closed" and syslog...

How can we proof this statement to the clients   These tests will verify that the infrastructure components, infrastructure services and business applications have sufficient security controls built in to ensure confidentiality, integrity and availab...

Picking at an old topic here. We have a PRTG installation for monitoring, but It can't handle all IPSec via SNMP.   How do you monitor IPSec connections on ASA, and alert on them? Tools, scripts, anything...   Best regards,   Michael

Hello, To make real time detection more effective, how to find the Cisco device alert pattern for real time detection of attack? For example, SQL slammer worm, Cisco IDS will fire its related/specific signature. For any Trojan activity IDS will fire ...