Network Security

Hello All,   I have configured service policy rules on my ASA 5545 :   policy-map CONNS class AttackingTraffic inspect http HTTPDOS set connection conn-max 200000 embryonic-conn-max 10000 per-client-max 300 per-client-embryonic-max 20 set connectio...

Just wanted to ask what is the database being used on the Cisco Sourcefire / Firepower Management Center?   Thank You.   vrian

Hello,   i have configured an ASA 5512-x following the quick start guide, Found here.   how erver i cant seem to access the internet, nor can i ping from the asa or a pc from the LAN side outwards. - this set up is verry simuilire to a second network...

Hi, We have a port channel with 2 of 1G links between our core of the datacenter. Due to the issue with one link, we want to force all traffice to another link, only use the 2nd physical link when the 1st physical link is full. Is there a way of doin...

I’m trying to finish a ASA install in our office and am having some difficulty getting my Web Server in the DMZ available to the outside world.   The web server is listening on Port 8888, and can be reached from a computer on the inside network, but ...

Hi  all,   I have a hub 5555 that needs to connect to a 5525 over a VPLS cloud. The production traffic needs to be completely separate from the management traffic. How would you configure this?

I configured an identity policy in FireSIGHT 6.0.1 to use active authentication. The certificate presented is for my FQDN (firesight.mydomain.com for example). During active authentication the intercept comes from my firewalls ip address (192.168.1.2...

HI, I have ine ASA 5505 version 9.1(5). I need to allow one ip on inside network to another ip on the inside network. Example: Source device: 192.168.9.240 Destination device allowed: 192.168.9.250 Allow the source device only to the target device wh...

Hello security experts, I can't find an answer to my question and I hope you can help me out.  Who knows how many routes the 5585 can support? We are deploying it in an enterprise environment and it will be configured with OSPF routing protocol. It s...

Hello guys I m getting complains  from remote access VPN users , slow access to servers , slow internet , the asa code is 9X thanks all in Advance

There are about 30+ ASA5505s out remotely that are monitored via an IKEv2 site site tunnel. The NMS software connects to the remote ASA on the inside interface to both ping and retrieve SNMP info (as well as the NMS server is trap receiver.  Of these...

alert udp $HOME_NET any -> $EXTERNAL_NET 123 (msg:"MALWARE-CNC Win.Trojan.Zeroaccess variant outbound connection"; flow:to_server; content:"GN"; depth:2; metadata:policy security-ips drop, service ntp; classtype:trojan-activity; sid:26932; rev:2; ) I...