Network Security

Hi,We have a couple of ASA 5515/wIPS in active/standby mode. They both have exactly the same licenses. The Cisco anyconnect VPN client works just fine with the primary ASA, but doesn't work (can not connect) with the stand-by one. Is that a normal an...

Hi Everyone . I try to configure AAA on ASA 5555 running version 9.6(3)  with LDAP over TLS 1.2 not working  but over SSL It's working  I would like to make sure ASA not support LDAP over TLS 1.2   Please advise me .   Thank you .

We have a Pair of ASA-5585 System configured as an Active/Standby pair.Every hour the system fails to to the current standby node. This has been an ongoing issue.here is a sample of that we are seeing at the time of the failover on the log.Mar 21 201...

Hi,   Can firepower / firesight, auto block an IP address if the IP generates an event or an alert. So rather than constantly blocking the attack, i would like FP to actually block the a fending IP for a set period.  

Hi, We have 4 offices, each with ASA5516-X running regular ASA software with FirePOWER modules. Those 4 devices are managed by the Management Center running as w VM. All 4 also are licensed for AMP and URL modules.  We are considering adding high-ava...

Hi,   Experts I need your supports regarding my ASA 5520.   The current version is below: Cisco Adaptive Security Appliance Software Version 8.2(5) Device Manager Version 6.4(1) Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz Interna...

Hi,   I've got ASA 5506-X. The task is to provide access to Web server which is located in dmz from internet (outside). I use static NAT 192.168.120.254 (Web server)--> 95.67.82.153 (Public IP). Unfortunately, it is not working. I try different confi...

hi, i need to update the IKE phase 1 and 2 policies to a stronger method on an IOS router acting as an EZVPN server. to my knowledge on the EZVPN server "pushes" the IKE P1 and P2 policy to remote client.   my question does changing the IKE P1 and P2...

Hi guys,    I have ASA 5515 running at 9.6.(3)1. In logs I noticed a huge amount of very strange records.  Duplicate TCP SYN from INSIDE: A /52565 to INSIDE: B /3389 with different initial sequence number Where IP "A" is Windows VM.Even when I shutdo...

Hi folks,   I created a NAT rule on my ASA for my MPLS users to access a internal webserver, and the same server have a NAT to outside. until now all good my mpls users access a web-server from mpls IP and have a NAT to webserver IP. Now my internal ...

fatal: Write failed: Broken pipe and brute force guessing login, why firewall not block SSH?is it coming from non-firewall side but source ip address are fake? how to confirm whether are these? <186>: 2015 Mar 24 08:29:27 HKT: %DAEMON-2-SYSTEM_MSG: f...