Network Security

Hello, I have a cisco asa 5525 and I found out there is a vulnerability ( cisco-sa-20180129-asa1 ) and I dont know if my version is vulnerable (my version is 9.6.3) . According to this site ( https://tools.cisco.com/security/center/content/CiscoSecur...

Hi,   In Cisco ASA ASDM it is showing top 10 user statistics for last one hour but I want to configure for last 10 minutes. Is there any way to configure this feature in ASA.   Thanks, Ashok

Hello, I Have a vpn between my site (asa 5506) and a costumer site (5505). It’s been working for more than 1 year but since yesterday the ASA 5505 is always rebooting (from 10 in 10 minutes). The crashinfo command shows: Thread Name: Unicorn Admin Ha...

Does prefilter policy in FTD support stateful inspection ? or I have to created two rules for outgoing and return traffic.

Just setting up my first instance of FTDv in AWS.  But for the life of me I can't figure out how to get the outside interface to reach the Internet.   I've got my Internet Gateway and all my other EC2 resources don't have any issues.   Looks like it'...

Hello i have some suggestions about Packet tracer. I think that the packet Tracer should be implemented the devices that can simulate also attack. attack on switch, routers, ios, firewalls, IoT devices.i can explain with for example: after we finish ...

Hi everyone,   On my ASA, I've met a strange issue about PING. Let me show you the config:Zone ADM: security-level 100, VM-net-device=192.168.1.1Zone MGT: security-level 100, VM-NMS=172.16.1.104ICMP echo, echo-reply, unreachable are allowed in both z...

I'm not sure if this is by design.  Anybody else run into this?   After re-image FPR2110 from FTD to ASA9.8.2, the chassis (FXOS) mgmt interface UI become "Forbidden- you don't have permission to access / on this server"     https://mgmt-ip   SSH int...

Hi Guys,   I have two ISR and two FTD firewalls connected directly with each other with redundant links (triangle shape). My question here do I need to put a L2 sw between FTD and ISR instead of directly connection? Is it healthy to do this? Or not n...

Greetings,   The topology is a MPLS network. NAT is done on the edge network-based firewall before the traffic goes to the Internet. Each remote site on the MPLS has its own router. The site in question also has an ASA 5510 that sits behind the route...

is anyone aware of a URL filtering category containing Crypto Mining URLs?   I have a huge list of crypto mining URLs that I want to block, and a bout 90% is not listed and/or has not reputation. Keen to get some input

Hello! Is it possible to have different block response pages for different subnets? For example custom response page for endusers and servers... Or perhaps it's possible to use response page only for specyfic subnets?