Network Security

Resolved! authentications on cisco sns3415 don't show ip address of device being accessed in Live Dashboard

I have a cisco sns-3415 that when users authenticate against a switch , in the ACS Dashboard Live Authentications I only see the username/access service and authentication type. I don't see the ip address of the switch being accessed which I also wa...

Cisco ASA - static NAT+PAT multiple outside to single inside

Hello folks! This is probably obvious to some of you, but it wasn't to me. On an ASA 5520 running 8.2(4), I intended to have two different lower-security interface IP address/port sets translated to the same internal IP address/port. The logic behind...

rv042 any too many security_notifications

Hello, I have a RV042 and on LAN a RW110. I receive too many security_notifications with numerous line like this one : May 10 12:26:59 2016 MYROUTER-NAME kernel: #warn<4> ACCESS_RULE: IN=eth1 OUT=eth0 SRC=192.168.0.40 DST=192.168.1.200 LEN=64 TOS=0x...

Difference between 500-285 and 500-290

Hi Guys,I have a question for you.I don't understand the difference between 500-285 and 500-290 exams. Both are about NGIPS and very similar.Any ideas?Thank you in advanceLorenzo

ASA 5510 Public Server Problem

I have been tasked with some ASA configuration coming in a few weeks, and to test out some configuration options I have setup a web server on my local network which I would like to be able to access from via WAN with one of our static IP that ISP has...

%ASA-4-722037: Group <> User <> SVC closing connection: Transport closing.

Hello, I tried to search for the meaning of this message but cannot find it, can anyone help? %ASA-4-722037: Group <> User <> SVC closing connection: Transport closing. I found the explaination of message error as: 722037 Error Message %ASA-5-722...

FireSIGHT: Access Controll policy out-of-date

I logged into the FireSIGHT and clicked on Policies tab -> Access Control tab , it shows "Access Control policy out-of-date on 2 devices. Intrusion Policies out-of-date on 2 devices". Clicked on it, it takes me to the pop up screen like this (in ...

Active Standby ASA with downlink switches in VRRP

Hi All, I am looking for help in getting a concrete topology for a couple of ASAs which will be configured in active standby mode. The ASAs will be connected to 2 switches which are already running VRRP. Will the following topology help? http://ww...

Resolved! Cisco IME - Show trigger packet

I have a question and my Google fu isn't giving me the answer. What do I need to do to see a trigger packet when I select an event, show event, Trigger packet? I've ran IP logging for the IP listed in the event and it's still grayed out. Thanks!

Very slow internet behind ASA5505

Recently installed an ASA5505 for a client. They have Verizon DSL (7mb down, 384up package). So my config is Verizon (Westell) DSL modem connected to e0/0 (VLAN2) of ASA. From there I have e0/1 (VLAN1) connected to a 3COM 2250 Plus 50 port switch....

Sourcefire/Firepower issue

We deploying a new sourcefire to replace a legacy firewall and proxy. We are having an issue with the way the Sourcefire is seeing the redirected traffic to the module.When traffic is passing through the module it looks as if web traffic is being ori...

Anyconnect 4.2 VPN with Cisco asa 5506-x not conencting

Hi all, I have configured an anyconnect vpn through VPN wizard. i can connect to VPN server through anyconnect software and getting user login prompt too. but when i enter correct username and password, it shows message ' Anyconnect was not able to ...

Is there a way to deny large file transfers?

Is there a way to deny large file transfers for common TCP protocols (SMB, NFS, FTP, SMTP, RDP)? Say for files of size 10MB, or 100MB? I know this is a very general question, but is there a way to stop file transfers once a certain threshold is hit...

Resolved! Asa 5510 can't access internal mail server

I recently installed an asa 5510 ios version 9.1 on my network. The outside interface is dhcp and the inside is static. If I need to access something from the inside using the outside address or public domain name, I can not. My outlook 2013 clie...

ASA not booting Stuck on error " i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40, address = 26 byte count = 1. Reason: I2C_UNPOPULATED_ERROR"

Guys I am get stuck on this issue, i have asa 5505 which was working more than 4 months, after power recycle the firewall is not booting now, it gives the below error. i have tried to upload the new image however the story is same. can some one hel...

Network Security

Forum Posts

Resolved! authentications on cisco sns3415 don't show ip address of device being accessed in Live Dashboard

Cisco ASA - static NAT+PAT multiple outside to single inside

rv042 any too many security_notifications

Difference between 500-285 and 500-290

ASA 5510 Public Server Problem

%ASA-4-722037: Group <> User <> SVC closing connection: Transport closing.

FireSIGHT: Access Controll policy out-of-date

Active Standby ASA with downlink switches in VRRP

Resolved! Cisco IME - Show trigger packet

Very slow internet behind ASA5505

Sourcefire/Firepower issue

Anyconnect 4.2 VPN with Cisco asa 5506-x not conencting

Is there a way to deny large file transfers?

Resolved! Asa 5510 can't access internal mail server

ASA not booting Stuck on error " i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40, address = 26 byte count = 1. Reason: I2C_UNPOPULATED_ERROR"

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

FMC warning when trying to run a deploy [update failed/in-progress]

FTD manger by FDM and RADIUS authorize-only

Anyconnect on Cisco 886 not working

Change IP address of FMC HA standby node

FTD Multi-Instance Data and Data-Sharing Interface

AIP SSC-5 signature updates

Config ASA for outgoing emails from exchange server inside

FTD 7.0.5 export Certificate of Device Identity

"logging monitor debugging, logging buffered debugging..."

Firepower denying packets due to wrong category