Network Security

Problem with high ping latency on cluster of ASAs

Can anyone knows what could be the reason of high ping latency, when I am pinging the ISP next hop router through cluster of ASAs and my inside interface on a cluster of cisco ASAs? When I leave one unit in a cluster of ASAs, ping is 1ms, when both u...

FirePower module - logging of IPS (snort) events

Migrating from 5505 to 5506-X and trying to set up FirePower. Have a full license, currently IPS and AMP in use. I get logging events from: - Blacklisted IP - security intelligence field - Malware detection But I can see no "intrusion prevention" (s...

Resolved! how to troubleshooting to find the reason of ASA failover?

how to troubleshooting to find the reason of ASA failover? which keywords can be used to search in ASA rsyslog file

OSPF through Transparent FW (FWSM) - Stuck in Exchange/Exstart

Hi, I have the following set up; RTR01 (6500) <-- VLAN4041 --> FWSM <-- VLAN40 --> RTR02 (Nexus 7K) Vlan 4041 is an SVI on the 6500 that the FWSM is installed in, Vlan 4041 is "outside" interfaceVlan 40 is trunked from the 6500 to an N7K which has a...

Resolved! Backup WAN Interface on Cisco ASA

Hi all, i want to configure a second ISP Interface on ASA. In most cases i configure a second default route with a lower metric and tracking on a public IP Address for example 8.8.8.8. If a Ping Track fails for tracked interface the first default rou...

How to configure ASA IPS modules to be monitored by CSM?

I have CSM 4.10 for managing my Cisco security devices. What do I need to do on ASA IPS module and CSM, so ASA IPS modules will be properly monitored by CSM? (dashboard widgets, event viewer, heath monitoring and rest).Thank you in advance!

Recently migrated from Firewall Services Module to ASA 5585

We recently migrated from a Firewall Services Module Version 4.1(8) to a ASA 5585 running 9.5(2). We have been up and running on the ASA for about a week now. The only issue we've seen is with ACLs whereas some of them didnt port over and we had to e...

Resolved! ASA - ping "distant interface", or use a workaround

(see topology below) We're trying to monitor two ASA5520s running 8.4(7)30 in HA active/standby via icmp. We're unable to ping the inside interfaces of either of the ASAs from our monitoring servers, I think because of the "distant interface" rule. T...

Resolved! SorceFire Portal login credentials different than Cisco.com?

Hello, Setting up a 5506-X with firepower and when creating a FireAMP connection it takes me to a SourceFire portal to log in. Where do I get those credentials? They aren't the same as my Cisco.com login. Thanks, Scott

ASA SSH debug

Hi all, I am trying to check login requests on ssh and do debug ssh or debug aaa authentication and authorisation with term monitor. nothing is displayed on the screen , why? Also I am trying this from an ssh terminal not console. thanks

Resolved! Access Control Policy and Intrusion Policy

Hi All, I'm studying for ips certification. I don't understand the difference between Access Control Policy and Intrusion Policy... Maybe the difference is: ACP is ip and ports control and Intrusion Policy is antivirus, file inspection etc etc? Thank...

Resolved! Cisco ASA image versions.

Hi All. Can anybody verify my perception on the differences between these images? asa933-7-lfbff-k8.SPA asa924-5-smp-K8.bin asa924-5-k8.bin I guess that lfbff is for the 5506-X and 5508-X With on-board FirePOWER services. When are one supposed to...

How FireSIGHT auto blacklist IP?

Hello, Does FireSIGHT is allow to auto blacklist the IP if hit the rule like SHUN? rather than manually blacklist IP. Thanks!

[ASA5510] Cisco AnyConnect - Cookie not HTTP-Only

Hi all,Recently we had an external security scan and one of the things that was pointed out is the following:4.5 Cookie not HTTP-Only Targets: **.**.**.** The web application sent a cookie that is not marked HTTP-Only. This allows the cookie to be ma...

Resolved! ASA 8.4 Port forward problem

Im trying to forward an outside public port of 60080 to an inside host port of 80 to an IP camera.I am having no luck.I removed the forward from the ASA config but i will paste my current config along with the commands i ran.Any ideas?commands i ran;...

Network Security

Forum Posts

Problem with high ping latency on cluster of ASAs

FirePower module - logging of IPS (snort) events

Resolved! how to troubleshooting to find the reason of ASA failover?

OSPF through Transparent FW (FWSM) - Stuck in Exchange/Exstart

Resolved! Backup WAN Interface on Cisco ASA

How to configure ASA IPS modules to be monitored by CSM?

Recently migrated from Firewall Services Module to ASA 5585

Resolved! ASA - ping "distant interface", or use a workaround

Resolved! SorceFire Portal login credentials different than Cisco.com?

ASA SSH debug

Resolved! Access Control Policy and Intrusion Policy

Resolved! Cisco ASA image versions.

How FireSIGHT auto blacklist IP?

[ASA5510] Cisco AnyConnect - Cookie not HTTP-Only

Resolved! ASA 8.4 Port forward problem

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Cisco Anyconnect Firewall rules

Firepower 7.2.1 - Issue with the FlexConfig Text object override

Private VLAN's interaction with ESXi and firewall

Packets appearing in ASP DROP?

What is PID when we try to integrate with Cisco API's

FMC API - can not associate a prefilter policy to an access policy

What is the result of placing, on ASA outside int, ACL...

On ASA5525 with vanilla setup, need to place ACL on outside int?

CSR 1000v ACL syntax-- use wildcards or masks?

SFR sensor upgrade fails readiness check