Network Security

Hello Everyone,I have got a cisco ASA 5525x with OS 9.1(2) and ASDM version 7.2(1). This is the multi-context firewall so we have bundled the interfaces in to port-channel and then we have created sub-interfaces of port-channel which are allocated to...

Hi Team, Wanted to check if we have preempt for FTD HA pair in Active/Standby. I dont see this feature added in the flexconfig (version 6.2) as well and there isnt any option on FMC as well. Please suggest if Cisco has any roadmap if feature is not...

Hello everyone, I am new to SA I want to set up an ASA 5525 on a local network in there are VLANs (Vlan print vlan server vlan client vlan wifi Vlan DMZ )I want how I can configure it and communicate the print and server vlan and client to each other...

How can I allow outbound ICMP but prevent a remote shell exploit such as this: http://resources.infosecinstitute.com/icmp-reverse-shell/#gref

Hi, I plan to migrate current Juniper SSG-320M to ASA5516. We have 3 subnet public IP ( server NIC configure with Public IP). The current firewall only 2 zone, Trust and Untrust adn 2 cable one to uplink and one to Internal. I'm confious why current ...

I can't SSH ,Telnet by"program secure crt "in (firewall,router any..) GNS3 ,who can guide to me connect "secure crt " with GNS3?

hi, i'll be configuring SSH version 2 and can see some of our ASA have existing RSA/general purpose keys (some ASA have several keys) with modulus 1024. can i re-use the existing 1024 RSA key for SSH version 2? or do i need to generate a new RSA key ...

Hi,  Does anybody knows how to modify the settings for the AAA config on a cisco ASA ?  Currently, I have a Cisco ASA ASA5520, its configured with Radius, below is the current config: aaa-server Radius_RSA protocol radiusaaa-server Radius_RSA (ins...

Hi All, I have a quick question regarding some twice nat configurations. I need to know if the following twice nat statement is necessary. (Firewall Spring Cleaning) Example: I have a destination in my DMZ that is being natted by yet another Firewall...

Hello, May i know what is the ASA firewall Architecture ?

Dear All,   I deployed ACP on my FTD devices but  still showing running since 1 day !. I don't know how to kill or delete it. below is the message Deployment - Policy and object collection complete. 23h 2m 40% Any idea please?

There is two things I am trying to Accomplish 1st is to ping my inside Interface from the outside subnet (So ping 192.168.44.1 from 172.24.100.0   2nd is to make ASDM work on either inside or outside interface. My network is just a home network. I p...

Hello, I have just implemented Deep Packet SSL Inspection on our firewallI am finding instances of SSL certificate pinning (HPKP) where I need to make exceptions to the DPI list e.g. *.google.com etc. This fixes the problem.What I am finding strange ...