Network Security

I am trying to implement a new network infrastructure. Plan is to have an ASA 5508-X in our head office, and a number (starting with 4) ASA 5506-X devices in our small branch offices. Plan is to have the branch offices route all traffic via a VPN to ...

I have recently taken delivery of 4 ASA5506X NGFW boxes. What is with the USB console connection? All 4 are barely useable, the plug has to be pushed in, and held to function properly. It seems to not be going in far enough to make a reliable connect...

Have just purchased and am beginning to configure an ASA 5508x. Our ISP has provided a 50mb/50mb fibre service, which is delivered via a Gbit port on a supplied "basement switch". I have set up a Firepower Management Centre, running 6.2.0.1 (build 53...

Hello All, we are trying to port forward  exchange (which is working fine) obj network EXCHANGE host 172.16.17.14   nat(inside,outside) static interface service tcp smtp smtp access-list EXCHANGE_in extended permit tcp any object EXCHANGE eq smtp a...

Hi All Is it possible to create a failover on 2 ASAs with 2 different ISPs but the ISP will be connected to each ASA directly, so basically the other ASA will not know about the other ISP connected to each other? Would you have to not monitor the in...

Dears, I am following the below link to understand the NAT above 8.3 and I have fall into one question, when we should use dynamic & static keyword in the TWICE or MANUAL NAT commands. . As I know the dynamic keyword is for dynamic nat and static key...

Hi all,         I'm now implementing RTC with ISE and FMC. The rule I use is when malware is found for specific computer, FMC send quarantine response to ISE along with this computer IP address. ISE will make limit access to switch port connecting to...

Hi,  If a customer orders ISE and after a year gets integrated into another organization would it then be possible to move the licenses from Customer A to B so we integrate all the licenses together in one agreement?

Hello All, I'm currently looking to add URL filtering functionality to our existing Firepower setup. Unfortunately every Cisco Partner I've talked to thus far has refused to Co-Term it with our existing IPS subscription (L-ASA5525-TA=), because "it'...

alert udp $HOME_NET any -> any 53 (msg:"BLACKLIST DNS request for known malware domain counter.yadro.ru"; flow:to_server; byte_test:1,!&,0xF8,2; content:"|07|counter|05|yadro|02|ru|00|"; fast_pattern:only; metadata:impact_flag red, service dns; refer...

Hi all, I am trying to enable Nmap instance in Firesight 5.4.1 and a bit confused with the following two points: 1. I noticed in http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/Scanning.html#pgf...