Network Security

I have 2 Cisco 4120 firewalls connected to a VSS with 2 6807 chassis.  I am having problems with the spanned etherchannel.  I frequently have links suspended and the switch returns a %LACP-SP-4-MULTIPLE_NEIGHBORS: Multiple neighbors detected error.  ...

I have a site that does not use AD and has static IP addresses for all devices.  I am looking for a way to statically map users to IP addresses in Management Center.  Is there a way to do this or use the agent but trick it somehow into using a static...

Hi,   We currently have a pair of ASA5525-X's as our external facing FW's and are looking into now replacing our internal FW's.  I am currently looking at the 5515-X, 5516-X & 5525-X, although I think the 5525-X maybe over kill for us and also costly...

Working on converting from an ACL to ZBF and running into a snag of a sort. Problem is with an ISR 4331 running IOS XE 03.16.05.S. The protocol, in this example, is using TCP port 2001, communicating with a custom API on a server. From looking at (o...

I have my IPS configured auto update signatures. It successfully downloaded the last signature, but i still see an old one installed on the IPS.You can see in the following sh version that the last installed signature is 616, while the last one downl...

I'm working on bringing an "ask the expert" program to you where you can chat, in the community forums, directly with a Cisco expert about a designated topic for a set period of time (24-48 hours or so).  Right now I want to collect your ideas for to...

Hi Guys, I have an odd issue, and I have a tac case open on this, and the response from the TAC engineer doesn't make me feel like zone based firewall works how I would expect it to. So I have Zone A and Zone B.  I setup a class map to match protoc...

Hi , i have a problem with firepower service ,  asa 5525x with firepower service was implemented in internet edge and the bandwidth is about 50M. in firepower i just do inspection with ips and during a week the RAM utilization rise about 90percent ,...

Hello, I have created a NAT rule in ASA.  But is there anyway to bypass NAT traffic to SFR?  as I keep to see some private LAN IP appear at security intelligence events logs. Thanks!