Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

SSL Proxy for POS-terminals

Hello, I have simple scheme: Client --ASA--Server. Client is a POS-terminal.Server doesn't have SSL. Client has to work with SSL. Can I use "TLS Proxy" for this purpose?

ASA FirePower Control License

Hi My ASA 5515 is supplied with control lic. Now protection and control feature is enabled for the box using firesight manager. Ans my fire-sight manager is updating signature. Please tell, is there need for FirePOWER IPS Subscription license. Tha...

MALWARE-BACKDOOR wow 23 runtime detection

Please explain this rule how it works. Is it detecting the alert based only on the content "R|00|23". Please explain how to figure this out. IPS Rule: alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"MALWARE-BACKDOOR wow 23 runtime detection...

(1:1000122) Local - BAD-TRAFFIC SSH brute force login attempt

IPS RULE: alert tcp $EXTERNAL_NET any -> $HOME_NET 22 (sid:1000122; gid:1; flow:established,to_server; content:"SSH-"; depth:4; detection_filter:track by_src, count 30, seconds 60; msg:"Local - BAD-TRAFFIC SSH brute force login attempt"; classtype:Hi...

Resolved! syslog server in sourcefire/firepower

How to configure syslog server in sourcefire/firepower?

Resolved! Ramsomware blocking signature

Dears, i have a sourcefire in my network and i want to block ramsomware attacks what shild i do for that ????? i have read on cisco sites Cisco has release a snort rules. what are these snort rules ??? https://tools.cisco.com/security/center/content...

ASA 5505 cannot get access to internet

Disclaimer: This is the first ASA I've ever had to setup. Very new to this, but I was volun-told to set this up. Spent 3 days now and just need some expert advice/direction to go. Issue: I cannot seem to get internet access to any device connected t...

Resolved! FirePower Hardware Module Cabling CONNECTIONS

My question is that how should we do the cabling on FirePower hardware module for data traffic coming in and going out from FirePower module.In a software module, we create security zones as per the ASA interface as an inside interface on ASA will be...

Resolved! Cisco License

I have an Cisco ASA 5515 i have already installec cisco any conect license for 100. but i wan't it to but 250 more, the question is do i need to added on other asa these 250 or can i build on same platform to be 350 ??I have an ASA with 100 license ...

Resolved! CISCO FIREPOWER 4120/ ASA Active/standby HA

HI all, We have pair of Firepower 4120, and need to configure the active/ standby HA for ASA, Do we have to create first cluster for the Firepower and then add logical device as ASA right ? Can i get good document to configure this ? Please assist

Resolved! Cisco ASA Failover

Good morning all, we are seeing some funny behavior with our ASA's. Its a 5545 and we have numerous static NAT rules setup. the issue seems to be that when the ASA fails over the internal hosts that have the static NAT rules enabled for lose connect...

Resolved! ASA FirePower .img VS .pkg

hi, i'm in the process of upgrading our asa 5525-X with FP module and saw the link below. https://supportforums.cisco.com/blog/12294976/asa-5500-x-sourcefire-firepower-configuration sorry for being a noob, but i would like some clarification and need...

ASDM access through IPSEC VPN using VTI's

Hi all, I have an ISA3000 running 9.7.1. I have four different route based VPN connection back to some PA3020's. These are up and working great. Traffic is successful in transiting the VPNs, however, I am having issues getting ICMP to a inside int...

Resolved! Issue with Policy Based Routing

I'm trying to set up policy based routing in a staging environment. The ASA is a 5515-x running 9.44 and it supports it. I have one internal interface and two external interfaces (ISP1 and ISP2) ISP1 is the default route. I'm trying to route tra...

Resolved! ASA 5515 second outside interface

Good day all, can someone advise what is the best way to go about setting up a second outside interface on ASA - reason behind is that we're trying to have a security alarm system have a dedicated internet feed, having 2 disabled interface on our ASA...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

SSL Proxy for POS-terminals

ASA FirePower Control License

MALWARE-BACKDOOR wow 23 runtime detection

(1:1000122) Local - BAD-TRAFFIC SSH brute force login attempt

Resolved! syslog server in sourcefire/firepower

Resolved! Ramsomware blocking signature

ASA 5505 cannot get access to internet

Resolved! FirePower Hardware Module Cabling CONNECTIONS

Resolved! Cisco License

Resolved! CISCO FIREPOWER 4120/ ASA Active/standby HA

Resolved! Cisco ASA Failover

Resolved! ASA FirePower .img VS .pkg

ASDM access through IPSEC VPN using VTI's

Resolved! Issue with Policy Based Routing

Resolved! ASA 5515 second outside interface

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Cisco FTD workaround for SSE connector failure stumbled on rights priv

Assigning an EtherChannel Subinterface to an Instance via FMC API

Using FlexConfig to change default command (no sysopt noproxyarp) rule

Trying to enable AnyConnect Alias

EU compliance certificate Firepower 1010 NGFW

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC