Network Security

Community, When I do a show version | i Hardware on my ASA it returns the following:qts-fwnonprod-1a# show version | i HardwareHardware: ASA5545, 12288 MB RAM, CPU Lynnfield 2660 MHz, 1 CPU (8 cores) However, on the Home page of the ASDM, when I clic...

Dears,I moved my ASA from local to AAA i m doing only authentication and no authorization and accounting, my SSH connection through AAA works fine but asdm access through AAA fails. Anybody can help me where i missing things i have cahnged the AAA co...

Hi all, We have an external switch which links our core firewalls to a private network in the internet.This switch is not currently able to be managed from our internal network via SNMP or with ACS/AAA Tacacs etc.I want to know the best way of secure...

Hi, Since the ASA 5585 has lack of interfaces, we are trying to add ASA extended interface module to the existsing ASA.  We have two (one active and the other one standby). Cisco suggested to have them shut down at the same time and finish installing...

I am testing and evaluating QOS from our remote locations to a server in our DC that is behind an ASA.  Using LiveAction I can easily see that traffic from the source is marked af21 to destination but traffic from the destination back to the source i...

Experts, I have gone through some recent vulnerabilities document from cisco and came to read a topic on DNS Tunneling & an Application tool that may perform such activity - DNScapy. "  DNScapy is a DNS tunneling tool. The code is very light and wr...

I have an ASA5508X with 8 ports.1/1 is WAN (172.16.0.1 to router)1/2 is LAN (192.168.1.1 to switch)1/3 is directly connectd (10.0.01) to a PC I want to use for monitoring traffic (10.0.0.2).1/1 and 1/2 have complex access lists on them.On 1/3 I creat...

Hi , i want to know/monitor what the users did or accessed once they have log in via VPN using Cisco ASA.Want to get the login/logout , durantion, what they accessed for ex. RDP or any services. Please advise. regards

Dearsi have a L2L vpn from branch to HQ and everthing works fine i am adding a new subnet in the vpn access-list exactly as per the cisco recommendation mirror access-list on both ends, But still the connection to the ISE server on port 1645 fails my...

We have recently upgraded our 100Mbps line to a 400Mbps line and discovered the ASA seems to be bottlenecking the connection. For instance if we plug straight in to our NTU we get the full 400Mbps but as soon as we plug in the ASA we're lucky to get...

i have one ASA5516-X with Firepower Services and i tried to reimage the Sourcefire module but it shows that sfr module is in recovery state and it did not accept any command like Session SFR console, or any other command.i am waiting since 3 hours af...