Network Security

Hello,    I recently acquired 3 licenses (full TAMC) for a 5500-x device. ProtectControl/URLFilter/Malware I generated the licenses for the License key displayed in ASDM ---> License key 77:xx:xx:xx:xx:xx. I installed the Firepower module. I insta...

I have recently implemented ASA5585-X SFR SSP40 failover. Failover is up interfaces are monitored and configuration is replication and syncing from active to standby pair. Connectivity to core switch Cisco 6807-XL which is VSS pair is as following;  ...

I have a Cisco Router configured  with Nat Static  translating  internal network to another subnet to avoid subnet conflict this is working fine, however internet browsing is not working with the  overload statement. snapshot configuration as follows...

Decided to take the plunge and reimaged my 5506W-X to FTD versus ASA.  I love NOT having to have Java on my PC in order to access a GUI.  However, I do not like the firePOWER CLI.  My impression is that you can see the config in ASA format but you ca...

Just looking for some advice on this issue we are having.  We have an active/standby 5520 setup on our network.  Our network is being monitored by a remote server via a VPN connection.  The monitoring server can reach everything in our network except...

Hi All, I am using ISE 2.1 along with Stealthwatch 6.7.1 I am working on configuring the ISE and Stealthwatch integration, referring the document, https://communities.cisco.com/community/technology/security/pa/ise/blog/2016/06/26/ise-21-and-stealthwa...

Hi,  I have one problem which I cannot bypass. Usually it works on physical interface out of the box, but this simply I cannot bypass. In short don't know how. I have configured one interface Gi1/8.10 VLAN 10 with IP 192.168.0.1 and management interf...

Dear Experts, i am trying to connect to an FTP server which is placed at outside (internet) with a public IP. firewall is able to ping FTP public IP, but my system placed at inside interface of my firewall with gateway of inside ip of firewall  unabl...

Hello, I have simple scheme:  Client --ASA--Server. Client is a POS-terminal.Server doesn't have SSL. Client has to work with SSL. Can I use "TLS Proxy" for this purpose?

Hi My ASA 5515 is supplied with control lic. Now protection and control feature is enabled for the box using firesight manager. Ans my fire-sight manager is updating signature. Please tell, is there need for FirePOWER  IPS Subscription license. Tha...

Please explain this rule how it works.   Is it detecting the alert based only on the content "R|00|23".  Please explain how to figure this out.   IPS Rule:   alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"MALWARE-BACKDOOR wow 23 runtime detection...

IPS RULE: alert tcp $EXTERNAL_NET any -> $HOME_NET 22 (sid:1000122; gid:1; flow:established,to_server; content:"SSH-"; depth:4; detection_filter:track by_src, count 30, seconds 60; msg:"Local - BAD-TRAFFIC SSH brute force login attempt"; classtype:Hi...