Network Security

Hi CSC,   Is it still possible to report on users visiting non business websites, (pornography, gambling etc..) if the FirePOWER devices are not licensed with the URL Filtering?   I don't have URL Filtering license but within my ACP I am matching App...

ASA 5510 is there a solution to allow said 5510 unit to auto blacklist an IP in similar fashion to fail2ban for linux? It is not so bad to shun an ip one at a time if it is only 4 or 5 IPs, but on those day when it 77 IPs on the list to add... I can ...

Dear all, When I upgrade from version 9.0.1 to 9.0.2 with HA firewall, restart for the first time, ASA - B (standby) is normal after reload, ASA -A(active) lose all configuration after reload, the reload process log as shown in the attachment. Futher...

Hello guys,   I am not familiar with sourceFire and I have to upgrade it for one of our clients. He has the DefenseCenter 2000 version 5.4.1.3 and the managed devices 3D8350 5.4.0.4   I need to upgrade the probes. This implies the upgrade of the DC r...

Good morning,  I have trouble with ASA 5506 configuration. I want to allow VPN users connect to servers inside my network and also give them access to internet without split tunneling. Can anybody told me what is wrong with my configuration? I was bo...

Windows 7 Enterprise Cisco AnyConnect Secure Mobility Client Used to create VPN with RSA token.   Connected to wired LAN.   When installed : 1) mirror driver for Tight VNC server 2) Tight VNC Server 3) putty > telnet connection 4)  USB Ethernet / RND...

Hello to all this is my first post so i would try to keep it simple and clean. I got 2 internal ip's that i want to translate them to 2 external ip's .Each one on its own. Lets say x.x.x.10 to x.x.x.200 and x.x.x.11 to x.x.x.201. Now which concept sh...

Dear All, I have a strange issue. I`m having FMC 6.2.3 which was working normally with 2 firepower 2100 added to it with failover feature. In the Access Control Policy, 33 rule is added successfully, but suddenly when i want to add another Rule or ed...

I am changing my laptop to a Linux OS.  But I need to be able to run Any Connect for work.  Can anyone please advise me of the best/most compatible Linux distros for running Any Connect Mobility Client?

All,   Is there a way to see what percentage of my CPU is taken up by NAT?     Also is there any advantage to have my servers on private ip space and have then Natted?  I understand why you pat but why would you do a one to one nat on servers?

How do you allow a single IP to by pass a single rule?   I see an alert that is associated with a SQL injection.  I know that the source and destination IP and port are 100% legit.  I want to exclude this single rule for the source and destination an...

Hello Experts   I was doing the cleanup on Cisco ASA version 9.8, I found below weird nat statement and objects. I really appreciate if someone can explain below and let me know if I can delete them safely?   object network obj_any subnet 0.0.0.0 0.0...