Network Security

Hi,   We are having an issue in ADSM. Its a ASA with firepower. Well, going to ASDM security rules, we click on a security rule-> "show log".  But we can not see any logs about this rule, but there are connections matching. We have a syslog configure...

Hello Everyone ,   I try to publish a website from a server range , so i Make an autonat static  nating on the firewall data-center but it didnt work and the internet connection on this server has been stopped !! Note *the firewall used on both firew...

Hi Community,   On our ASA 5508-x firewall, we have a requirement to take Broadcast traffic in one of the interfaces with security level 100 and place it on the outside but as multicast and on specific port.   The questions is: is IP multicast helper...

I need some confirmations about code versions.  Maybe someone can provide confirmation for me on the following:  We have a mixed environment at this time with: - Cisco ASA devices running ASA code - Cisco ASA devices running ASA code and SFR(firepowe...

So I am currently trying to get my IPS to generate events for when executables are downloaded. I have went in to my intrusion policy, enabled the rule for executable downloads to generate events and set the threshold for 1 count every 10 seconds. I a...

I have 2 ASAs in a active/standby failover cluster.  They are running in Multi Context mode.  Currently, there are no interfaces shared between contexts.  All contexts have sub interfaces of a port channel allocated.  However, now I have a few contex...

Hi,   I have a topology:   INSIDE: 192.168.1.0/24 OUTSIDE: 200.200.200.1/27 DMZ: 192.168.200.0/24   INSIDE hosts are NATed to OUSTIDE ip address (200.200.200.1) In DMZ  I have a server with address: 192.168.200.200 wich is NATed to 200.200.200.2   My...

Hello,   I bought two ISPs. now i want to forward traffic generate from 192.168.90.30 to ISP 1 and rest of the traffic from ISP 2. I have tested static route, PBR, But nothing work. ALL traffic go through ISP 2.

Hi,   I have a ASA 5520 firewall as a boarder of our network to one of our client.   Recently, the outside interface of the secondary unit keep testing and keeps pass. I got the email from the firewall a few times a day. there is no obvious network d...

hi,   I have a cisco ASA 5525, and I need to establish a vpn site to site.It establishes phase 1 without problems, but for phase 2 they ask me to use a Public IP for the encryption domain, however that ASA does not have a direct connection to the Int...

Hello All, I was reviewing the intrusion events for PUA-OTHER Cryptocurrency Miner outbound connection attempt (1:46237:1) signature and not sure why the Action on this signature is Would have dropped. Please find further details:   1) FirePower devi...