Network Security

Hi, I'm not a network engineer myself, but will try and communicate this best I can.  Please bear with me. I have servers on a subnet that I need to segment for security reasons.  Currently they are all in a single VLAN.  I'd like to complete this se...

Hello, I have two sites 3 miles apart. Both have a 100MB internet pipe and terminates on my Cisco Firewall. I have dmz services running at both sites but my two firewalls are running as stand alone devices. I am just looking for advice on what approa...

When trying to do a firepower upgrade from 5.4.1 to 5.4.8 I get an error when trying to upload the files. I click to select the file and it runs a bit like it loads the file and then gets "Bad Gateway". This seems like a browser or Java issue. I did ...

Hi all, PC1#sh run int e0/1         ! interface Ethernet0/1 no switchport ip address 192.168.1.1 255.255.255.0 duplex auto end PC1#sh run all | i ip route ip route-cache ip route static adjust-time 60 ip route static inter-vrf ip route 0.0.0.0 ...

I have a question about the ASDM.   We have a primary/secondary configuration and having a problem where we can access the ASDM via the secondary IP but not the primary.  The only way to access the primary FW is to ssh from the core router.   I can r...

we trying to disable MOP service on cisco 3850 switches but there is no such command available on this switch. we tried to enter no MOP enable command in the interface. IOS Version: 03.07.04E Kindly suggest..

Hi. Since I'm fairly new with this, I'd like to know if there are still ways to access our ISE Admin portal since Windows doesn't support SHA-1 authentication anymore? Tried latest versions of IE, Firefox and Chrome with no luck... BTW, this also a...

Our vulnerability assessment has shown that we are potentially vulnerable to Layer 7 DoS attacks like slow http post (http://tinyurl.com/3l4fnjg) or slow http headers (http://tinyurl.com/lgph8j).  I'm wondering if there is anything we can do at the A...

I'm trying to wrap my head around the new NAT in v8.4 and greater - specifically 9.4.For a VPN policy I need to NAT hosts before encryption.I have a need to upgrade a 5510 running 8.2(5) and one of the issues is NAT.I'm familiar with 8.2 policy-nat i...

Hi Experts,  New to Cisco world here. I need to know if it is possible to create a full mesh site-to-site IPSec VPN using Cisco ASA firewalls. There are 8 sites to begin with and 21 sites in all.  Thanks in advance for your suggestions.

Hi AllSeeking for suggestion on Real Time Activity Monitoring Tool for Cisco ASA 5540 and PIX 525 and possible store data to generate reports.Tool which provides what bandwidth is consumed inbond/outbond for services like  email, web browsing, termin...

Hi all, I have 8 asa5506 installed in 8 different locations connected by a WAN MPLS circuit.  I wuold like to implement next generation services like IPS, URL and AMP and manage all my firewall with a virrtual defence center installed on my central s...