Network Security

Hello all, I would like ask you about some technology help  .. Customer would like create policy model for remote-access services based on „roles“. For example :User1 is member of GroupA in LDAP and is member of GroupB as well.Security GroupA specify...

Dear community members,I have to connect an additionnal small PoE switch to existing 2960 edge switch. At the moment of additionnal switch connection that specific port is disabled after few seconds.From what I have found when googled, it seems that ...

Hi All, I have Cisco ASA 5585-X and currently it has memory 12 GB and it is almost 100% utilized. Shall we upgrade the memory for ASA 5585-X and how?

Hi folks,I'm having trouble with traffic between different subnets connected to different interfaces. In interface CARRIERS is connected a server with ip address 10.227.224.11 and in interface INSIDE_Prueba I have connected my PC with ip address 192....

Hi I have a question regarding Evenyt ID's in Sourcefire. One of the workstations got infected with the following virus and the quarantine says that it failed with the error code: 3221225524. Does anyone have a list of the error codes so that I can f...

Apparently the management interface on the 5525-x doesn’t support syslog. After 2 1 month(s) working on the problem, it works normally on the inside nic of the ASA. (TAC and myself have tried everything it's safe to say)The DOD has STIG compliance re...

Hello,We have bought Cisco FirePower Management Center for 2 devices (FS-VMW-2-SW-K9).Can we buy another license for two devices and expand the existing Management Center?

I have a Cisco 880 and try to establish an IPsec VPN dialin in combination with zone based firewalling.The IPsec dialin works fine without any issues which was crosschecked before activating the ZFW.ZFW config looks like this:!class-map type inspect ...

Hello, I would like to ask about how to migration Intrusion Policy from VDC to DC750?I had tired import the Intrusion Policy from VDC to DC750, can't import as version mismatch with VDC:5.4.0 and DC750:6.2.1. Thanks for your suggestion! Regrds,Thaung...

Hey all, Somewhat of a silly question when it comes to identity NAT rules, which cause the ASA to use NAT divert instead of the routing rable. How does the ASA determine the next-hop IP address in this scenario? We currently are dual homing our ASA t...