Network Security

I changed IP address on an SFR to an available IP address within a remote subnets IP range. The ASA is being shipped to this location where the SFR will communicate to the FMC accorss Lan to Lan Ipsec tunnel. The SFR in question is still here at HQ a...

Hi All, i have tested this on several 2960x with IOS 15.2.2.E5 which is a recommended version of code. when auth fails it does not show the username and it is blank on the logs but when it succeeds it is fine. Has anyone encountered same thing? looks...

we are overhauling our current WAN and have install a 5506-x to connect to our WAN. We are having a problem on the inside interface. We have a Dell N3000 switch which is set as L3 router and it has 4 vlans on it. One for the data network, a voice vla...

eg if i wanted to ensure there was protection on the following CVE-2017-3832 how could i check to ensure that we had protection in place for it? the old ips portal would give the CVE id https://tools.cisco.com/security/center/viewIpsSignature.x?signa...

Question 1. In ASA Firewall with multiple context how can i divert traffic to firepower module and in which context should i put the management port? will it be in admin context or it will be shared in all the contexts?   Question 2. Is OSPF and SLA ...

Please help, For some reason I keep getting denied when configuring port forwarding on an ASA 5510. The current topology is Internet----Modem-----Router--------ASA 5510 (Active/Standby)---------Inside------PHP_TESTIf I am allowing to open a web serve...

Hi CSC, When applying a service-policy within ASA for traffic being sent to the FirePOWER module, should this be applied to all interfaces within a bridge group. See attached picture for example setup which has a Steelhead also. Is there any need to ...

Running an ASA5506 with FirePOWER 6.2.  All is working well (within limits) The question now is:  I see transactions being blocked on the Home->ASA FirePOWER Reporting->Policies screen, but what transactions were blocked by that Policy (rule)? A coup...

We're having issues connecting with a vendor's Skype for Business installation. They have their own servers and are not using Microsoft's cloud Skype services.  The problems are intermittent - it will work one time, but not the next.  We've done a lo...

What does it means ?     Is there any issue         6 Apr 30 2017 13:51:12 106015 1.1.1.1 443 2.2.2.2 64274 Deny TCP (no connection) from 1.1.1.1/443 to 2.2.2.2/64274 flags ACK  on interface Outside 6 Apr 30 2017 13:59:19 106015 1.1.1.1 443 2.2.2.2 2...

I want to need a firewall which must have to the following criteria. 1. Firewall performance (Large packets) 19.5 Gbps with multiprotocol performance of 9.6 Gbps 2. IPS and App visibility combine performance should be 5.5 Gbps 3. Firewall should supp...

Hi guys, Am trying to allow access from the internet to a web server in the DMZ hosting SQL server. I want to enable access through a public IP address. The application uses port 1433. I,ve set up the necessary ACL to allow any source IP and port to ...