Network Security

Hi, We are currently running our 8250's in an IDS mode and we are changing to an IPS mode.  We have lots of rules which are now resulting in a "would be block", that is going to change to a Block result. To ease the migration I'm looking for ways of ...

Dear All, I know the FTD does not support yet but was hoping to bounce some question I had myself about clustering and multicontext on the asa/4100 Firepower 21/41xx with ASA image: · How many “Logical Devices - ASA” supported? · How many context per...

In the attached where I have a Transparent Mode ASA with a few bridge groups (10 and 20), when assigning my Service-Policy which redirects traffic to the SFR, does this apply to traffic "inbound" on the Interface I apply it to. E.G I apply the servic...

Hello, I am implementing a new asa firewall that will act as both a dhcp server and dns resolution (forwarder?) for inside clients. There is NO internal DNS or DHCP server nor will there be, the ASA will do both of those functions. The dns server ent...

Hi I have a Cisco ASA 5510 in single mode that is used for IPsec VPN site-to-site tunnels. I would like to migrate the VPN tunnels onto a 5525X running in multiple context mode (i.e., create a new context and move the configuration onto it). Does any...

What happens when there is a TCP half closed connection ? How long the connection remains alive before it gets closed ? Is there a specific setting in ASA to manage half closed TCP sessions ? These are the questions asked to me during network securit...

Good day.  I work in a high security network and after recently installing CSM 4.11 on Windows Server 2012 R2 I need to install a 3rd party SSL certificate to remediate a vulnerability with CSM using a self-signed cert; our security requirements stat...

I have upgraded from a 5505 to a 5506-X that I have on a small test network at home.  I was able to configure the internal and external interfaces and have access to the internet and DHCP.  I'm looking to configure the following networks: PC/Printer,...

hi All, L2tp tunnel has been configured between routers on Site A & B to bridge them over seamlessly. I have been task to just encrypt traffic between two ASA firewall, with l2tp tunnel on routers behind them. What is the best method to do such encry...

Hi All We are looking at alternatives to Checkpoint firewalls, namely the Cisco ASA which we already use a number of The main benefit of the Checkpoints is centralized logging and reporting and management Is this something that Cisco ASAs can do thes...

Hi guys, We already have our ASA (active/failover) configured for AnyConnect VPN on the "outside" interface to support PC AnyConnect VPN users and Cisco 7945G VoIP AnyConnect VPN phones. This is fully functional and operational - no problems. Now, si...

Hi guys, I have a Cisco ASA being pen-tested. A bunch of UDP ports are showing as "open." UDP scans are tricky per: https://community.qualys.com/docs/DOC-1185 "Scanning UDP ports is more inference-based, since it does not rely on acknowledgements fro...