Network Security

Правильно ли я понимаю   embryonic-conn-max – это общее ограничение на полуоткрытые сессии. Не на конкретный хост, а на все которые у нас есть.. т.е. если у нас 500 сайтов работающих по 80 порту, то 10000 делиться на все 500 сайтов. Так?   per-client...

Hi There. Is there any chance I can get when was instaled the Licensing on a IPS 5525  on CLI?, Im looking for an answer and I got this form IME: But it is not clear for me . I´ll continue in my search Thanks in advance

Site A has a very large IP block (otherwise we would have used 1:1 NAT) Site B has 20 hosts Site A primarily initiates traffic to Site B; any host at site A is allowed to connect Site A has 2 network links in to Site B  It will route traffic through...

Hello, I'd like to know if it is possible to configure a cluster with asymetric topology. for example let's say I have nodeA in Datacenter A and nodeB ind Datacenter B. Both nodes are connected to the same local LANs, but nodeA ge0/0 is connected to...

Hi, I've got a pair of ASA 5545's running OS v 9.3(3)2 and the IDS/IPS Modules are also enabled. We wanted to upgrade the OS to v.9.6(3)1 which according to the release notes should be no problem. It is though ! The Standby ASA had the image flagged ...

Hello, I just got started with the FMC1000 and I would like to use the 2nd NIC as a backup between our two distribution switches.  Linux has supported bonding from version 2.0 and I doubt that Cisco would have build the FMC on something that old. Can...

Hi there,recently i bought and installed new SSL certificates for the ASA, but the old invalid certificate still on the firewalli am thinking to delete it but im afraid its gonna cause some problemsanyone have some advise whether i should remove or c...

Hello! Due to a software appliance that is sitting behind my ASA, my logs are flooded with this kind of messages: Duplicate TCP SYN from Public DMZ: 206.81.189.10/58640 to Outside: 52.84.27.22/80 with different initial sequence number This is a legit...

We have a version 5.4.x Firesight VM managing two 5525-X Firepower services and we are trying to upgrade to FMC6.2. Plan is to: 1. Build a brand new FMC 6.2 VM 2. Manually migrate policies to new FMC 3. Schedule down time to upgrade the firepower mod...

hi, just a quick one, if adding an ASA active-standby FW in ACS 5.4, do i just create a single entry? meaning I only add a device using the 'active' IP address?

Hello "Download updates failed: Error parsing the update file. The file may have been corrupted or the download was incomplete." support.Sourcefire.com is it down tooday ? Best regard

Dear All memebers,Hope all be fine,I have a problem in Cisco ASA 5510 Firewall, when I get this firewall it was old ASA image and ASDM version, So I upload a new image and asdm and booting it, after reboot the firewall can't load it's image from flas...