Network Security

MALWARE-CNC Win.Trojan.Zeus variant outbound connection

Hello, I've seen this alert a couple of weeks ago: "MALWARE-CNC Win.Trojan.Zeus variant outbound connection". I did a full scan manually on the PC that the alert was pointing and it found nothing. How can I check if it is a false positive or a true ...

two ISP links active Active Configuration

I have ASA 5515x firewall with Version 9.1(2) IOS. can I configure two ISP links on active Active mode?

5506 PAT to multiple devices, but only 1 Public IP address

Have a site with a 5506, ver. 9.6, that I need to allow https traffic to several meters on the inside network. Every time I try to add a translation from, port 8010 to 443 on the inside, the firewall refuses the translation saying I cannot use the o...

Cisco Firepower Management Center

How to white-list an IP address in Cisco Firepower Management Center .it is running on VMWare..

Resolved! Management Interface of FPR4120 not won't come up

Hello guys, I need your wisdom. I am setting up a FPR4120 but the interface management does not come up. I am able to login to the console and I have already completed the initial setup. However, when I connect it to a switch or to my computer, the ...

ASA connection flags

Hi, Our asa 5520 firewall passing the SIP traffics and I see the connection flags "ti" and "mi". Is this normal and do we need to do something on it? I have no clue where to start the trouble shooting with. Thank you.

Resolved! Just upgraded two 5515X to FTD, do I need to purchase FMC for HA?

Just upgraded two 5515X to FTD, do I need to purchase FMC for HA? I used to be able to do HA without additional purchase. If I need to purchase FMC, is this the correct license for VMWare ESXi? SF-FMC-VMW-2-K9 Also is there SmartNet I need to get as ...

Resolved! Cisco NGIPSv Licensing using Cisco FMC

I have a 90 day trial license for Cisco FMC but since trial license does not include PROTECT license thus NGIPSv state is unlicensed, is there anything which i can do to get NGIPSv trial license since that topic is on the CCIE Sec v5 blueprint exam? ...

ASA 8.0(2) "memberof" command question

Does anybody knows what this feature was designed for?username newuser attributesmemberof DevTest,managementIs it another form of Group Lock feature?username newuser attributesgroup-lock <tunnel-group1>Thx.

Cisco IPS sensor weak cipher

Hi Team, My question is how to disable weak ciphers in Cisco IPS sensor model IPS-4260-K9 version 7.1(8)E4. Vulnerability ID is CVE-2013-2566. I tried many search options but not able to get any solution on this. H...

Reset my PIN number without the current PIN

Dear Sir, I can not reset my PIN because to do so I must have my current one and I can't remember what it was. I can't find anything on your website or in the manual. All speak to changing your PIN when you know the current one. HELP!

Resolved! ASA 5512 log function or something

We want to check what caused the server behind 5512 cannot be accessed from outside occationally. If we can check some log like NAT traffic? If we can set some monitoring? Other way to do this? Thanks in advance.