Network Security

Hello, I am experiencing many connections from various users and devices that show as a Secure Web Browser client.  When this happens there is usually no web application or url information associated with the connection, so I am unable to know what t...

Instead of waiting for a bug, is it better to upgrade the IOS version now to avoid the possible bugs? Cisco Adaptive Security Appliance Software Version 9.1(6)11 Device Manager Version 7.1(7)

I had setup port 7 since port 7 and 6 has PoE. Story short, On my ASA I have setup vlan 101 for Wireless and 100 for inside and on port 7 switchport i selected the port as trunk and include vlan 100 and 101 then i also selected native vlan option and...

Hi , We are having a server which ip is 10.11.16.21 . We have already NAT it with 115.110.103.11 for the port no. from 80 to 90 . It’s working fine . Now, we need to map the above mentioned internal ip (10.11.16.21) with the other public ip 115.110.1...

Hi guys, i have an issue with my config and probably not understand the whole thing right. Perhaps someone is able to open my eyes .. Thanks in advance : So what is exactly the issue? I have a router 2821 and firewall active . Also i have an acl for ...

I just imported the "Update Rules" for my SourceFire POWER.   On Help -> About -> Shows the right imported "Rule update version" On Policies -> Access Control -> it shows "out-of date on 2 targeted devices" in red text for the policy we are using, un...

Hi Guys,I'm working on Firepower Threat Defense deployed on ASA 5525/5515. I had added the FTD to the FMC ( Mangement centre). after I add the sensor to the DC I can see the health is in normal for a while.  But after hour times, the health automatic...

Hi,I'm trying to do port forwarding on Cisco ASA 9.6(1) but for some reason it keeps failing for me. I would like to map port 3000 of host 172.16.0.10 to port 80 of the outside interface of ASA. Here is what I've done so far:object network obj_172.16...

So for example, why i need scan.rules when there is something like sfportscan preprocessor ? Is it because preprocessor can not detect all the activities and so there is detecting engine using rules with well known signatures of network attacks tryin...

Hello! I am trying to clarify one thing regarding blocking files with the malware part in firepower. Is the SMTP filter part only for  uploading and not   downloading.  Does that mean that incoming SMTP is not inspected by the FirePower?  That seems ...

Hello, I am about to upgrade a ASA5555x.  However, I have been reading on some blogs that there is an issue with AnyConnect VPN clients.  I have not seen it on any of the Release notes for FirePower and the 5500X and the Data sheet clearly indicates ...