Network Security

Hi everyone, I've configured snmpv3 client on my ASA with policies snmp and snmptrap. I found there are only snmptrap traffic from a switch (also configured snmpv3) on ASDM but snmp hit count stays 0. Then I run packet captures on this ASA ingress/en...

Hello, I have a cisco asa 5525 and I found out there is a vulnerability ( cisco-sa-20180129-asa1 ) and I dont know if my version is vulnerable (my version is 9.6.3) . According to this site ( https://tools.cisco.com/security/center/content/CiscoSec...

Hi,   In Cisco ASA ASDM it is showing top 10 user statistics for last one hour but I want to configure for last 10 minutes. Is there any way to configure this feature in ASA.   Thanks, Ashok

Hello, I Have a vpn between my site (asa 5506) and a costumer site (5505). It’s been working for more than 1 year but since yesterday the ASA 5505 is always rebooting (from 10 in 10 minutes). The crashinfo command shows: Thread Name: Unicorn Admin Ha...

Does prefilter policy in FTD support stateful inspection ? or I have to created two rules for outgoing and return traffic.

Just setting up my first instance of FTDv in AWS.  But for the life of me I can't figure out how to get the outside interface to reach the Internet.   I've got my Internet Gateway and all my other EC2 resources don't have any issues.   Looks like it'...

Hello i have some suggestions about Packet tracer. I think that the packet Tracer should be implemented the devices that can simulate also attack. attack on switch, routers, ios, firewalls, IoT devices.i can explain with for example: after we finish ...

Hi everyone,   On my ASA, I've met a strange issue about PING. Let me show you the config:Zone ADM: security-level 100, VM-net-device=192.168.1.1Zone MGT: security-level 100, VM-NMS=172.16.1.104ICMP echo, echo-reply, unreachable are allowed in both z...

Not really sure how to read this compatibility matrix for Fuji but can anyone help me determine if my switch is compatible? I am currently running 16.3.6. I saw that the new Fuji (16.8.1) version came out on the 6th. Compatibility Matrix posted below...

I'm not sure if this is by design.  Anybody else run into this?   After re-image FPR2110 from FTD to ASA9.8.2, the chassis (FXOS) mgmt interface UI become "Forbidden- you don't have permission to access / on this server"     https://mgmt-ip   SSH int...

Hi Guys,   I have two ISR and two FTD firewalls connected directly with each other with redundant links (triangle shape). My question here do I need to put a L2 sw between FTD and ISR instead of directly connection? Is it healthy to do this? Or not n...

Greetings,   The topology is a MPLS network. NAT is done on the edge network-based firewall before the traffic goes to the Internet. Each remote site on the MPLS has its own router. The site in question also has an ASA 5510 that sits behind the rou...