Hi, I have a requirement to upload the below snort rule to my sourcefire platform: any any -> any any (msg:"Malicious SSL 01 Detected"; content:"17 03 01 00 08|"; pcre:/\x17\x03\x01\x00\x08.{4}\x04\x88\x4d\x76/"; sid:9999998;) However I keep ge...
Forum Posts
Resolved! ASA 5506-X HA options
We can see in the datasheet that the ASA 5506-X supports HA as Active/Standby.Does this model of ASA also support cluster? Does it need the security+ license in order to use A/S?
Dear Experts, I am planning to ASA hardware migration from ASA 5510 (ver 8.2) to ASA5516-X (ver 9.6). I would like to get your help/advise for my migration. 1) what is the best way of this migration fro 5510 ver 8.2 to ASA5516-X (ver 9.6) 2) Is th...
Resolved! Certificate expiry for ssl vpn
Hi For remote ssl vpn, if we dont use certificate based authetication ( we use Radius for authetication), will my ssl vpn not work for users if an identitiy certificate expires?? I thought users would just get a warning page before he/she connects to...
Resolved! Cisco firepower 2130 and 3925 router
Hello, trying to understand if a 3925 router is needed if a 2130 firepower is in place for network protection and why or why not? Thanks.
Hi Everyone I have just been given a pair of 5515X firewalls which the company would like to use. We publish RDS connections to a single WAN IP (1.2.3.4) using different port numbers. Internal servers (Range 172.16.0.0/16) keep the same port of 338...
Hi, In the case of multiple sub-interfaces with the same security level, I only want specific ones to talk to each other. Would a ACLs be used in this case? Also, would there be any need to NAT the traffic? Is there any specific licensing requi...
ASA 5510 running 8.4(7), ASDM 7.1(1) This is the first time I have seen this but it appears that the Global-Policy inspection map is not there at all in the default factory reset configuration. In all my past experiences with ASA this is preconfigu...
Resolved! ASA HA pair
Hi , How to push the bulk config ASA primary to secondary device. is this possible ? thanks
Hi All, We are using IBM Database studio to access Database server which works on Port 50000. But we are facing lot of slowness while accessing server(lot of time to connect to server,facing slowness while executing any query) using Database studio...
Hi Guys, I have an ASA 5505, 3 internal PBX servers, and one dedicated available public IP that is NOT the IP of the outside interface. host 172.16.142.5 host 172.16.142.6 host 172.16.142.7 host 138.xxx.xx.154 I need all of the internal PBX servers ...
Resolved! Static NAT Question
I found this static NAT, can someone help me explain why it's pointed to the same IP? static (inside,outside) 10.17.1.10 10.17.1.10 netmask 255.255.255.255 Thank you!
We are looking for a solution in our environment that would perform intrusion prevention, threat defense, advanced malware protection and content filtering. I know fire power and AMP can do all that, but I need help on understanding how all these can...
Since upgrading my FMC 1500 from 5.4.1 to 6.2.2 I have been getting an alert that looks like this Severity: warning Module: Process status Description: The remediation daemon exited 5 times I don't have any remediation rules configured, and only ...
I have an 1841 router with the F/W feature set ( C1841-ADVSECURITYK9-M), Version 12.4(25e)) and am researching the IPS capability. All the documentation I've read talks about adding the idconf switch at the end of the copy but I am not able to do so ...
