Network Security

I'm running a 5515 ASA with version 9.4(2)6 and due to a report created after a recent pen test, I've been requested to disable CBC mode and MD5 MAC algorithms on my security appliance. After much searching on the web and using both ASDM and the CLI,...

Hi, I need some help with a firewall that is in production. It's a pair of Cisco 5525 running in active/active, which has the base features installed along with a VPN Premium licence. The issue is the firewall only does ssh1 and not sshv2 because it...

Hello, We have a server that we would like to dedicate a 2Mbps bandwidth to (out of 10Mbps dedicated link). We had configured the ASA firewall as following: !access-list Srvr permit ip host 172.x.x.x any!class-map Server match access-list Srvr exit!a...

Hi I am trying to implement Remote Access VPN with AnyConnect using IPSec IKEv2 and User Authentication must be with certificates. When I use a wizard, I see a "AnyConnect Client Profile" is being created. However under the "Advanced" Options, unde...

Hi Guys, We have just spent time installing and configuring a cisco ASA 5506X in a small hotel where we have a number of networks that need to communicate with each other and to an MPLS. It appears to be working fine and passing traffic where needed...

Hello dear friendsA have the same BUG on  ASA 5525x imag 9.4.1  CSCub40805 - all the same. Can somebody open a ticket on cisco service, I have not permition to open service request. BUG link: https://tools.cisco.com/bugsearch/bug/CSCub40805/?referrin...

Hello.When trying to access the asa (8.0(3)) with asdm the console send follwing error message:vPif_isVpifNumValid: pifNum out of range!vPif_getVpif: bad vPifNum(0xa6) from 87EBC81 from 83833B4Have a strong suspicion that it is a hardware failure (si...

I am trying to configure cisco 2901 routers with Zone Based Firewall and High Availability Pair with Transparent mode i followed Cisco guidance, but its not connecting: when i run sh redundancy, its showing communication down: redundancy applica...

Hello, we are currently installing the cisco firepower 4120s. There are some limitations so we are using one 4120 for a firewall ASA and one 4120 for an IPS. but after a later OS release we will combine the firewalling and IPS into one appliance. The...

Hi! Run into a strange issue today, ASA 5525X with 9.6.1 code started dropped some traffic randomly and ended up with 100% cpu after a few hours. (HA failed as well) rebooted the appliance, but run into same problem after a few min. icmp ping to the...

Hi, We have a scenario with three ASA: one 5515-X with FirePOWER in the HQ, two 5505 in each branch, and IPsec VPN tunnels from both 5505 to the 5515-X. We are forwarding all the traffic from the branches to the VPN tunnels (vpn acl is from branch ...

Can any body help me in understanding deeply about the difference between Anti-Malware and IPS. Also i was thinking that once a Malware is detected by Anti Malware and it is no longer zero day or Unknown, will the IPS be capable of having the pattern...

Hi, can some one assist ? to clarify firewall expansion module ASA-IC-6GE-CU-A which is specifically suitable for models ASA 5512-X and ASA 5515-X can be used it on ASA 5525-X series firewalls. Cheers, Vikram