Network Security

Hi, On our Firepower system we block all incoming malware after file lookup. We have an issue on incoming SMTP traffic; because the incoming malware has been blocked (and connection is reset), the sending SMTP will retry to send us the same mail wit...

So it seems the rsa host key is stored in a database in one of the ios-xr filesystems. I've been tasked with restoring both RSPs on router, and while having backup configs, licenses, and snmp folders have all been prescribed, I'm very concerned about...

We recently purchased a license i.e. ASA 5512-X CX Application Visibility and ControlAs part of the process we had to install ASA-CX module ; We caught up in trouble while doing that.As per the manuals , we did upgrade the ASA software (to 9.1.2) alo...

I have a new ASA 5506-X. I would like to connect to it from my Windows PC using the Cisco VPN Client on my PC. I did not purchase any special licenses with my 5506-X. Are VPN connections supported to this ASA out of the box or do I need to purchase a...

My objective is to intercept traffic from a particular subnet (192.168.5.0/24) that has been directed to the ASA as the default external route and then redirect that traffic to a proxy server that exists on the ingress interface. I've set up the PBR...

Hello, For particular one session we are seeing lots of UfrIOB Flag.  Any reason for that ?  tap-glm XXXXXX:2917 glm-old-backend YYYYYYY:80, idle 0:00:43, bytes 1257, flags UfrIOBTCP tap-glm XXXXXX:2915 glm-old-backend YYYYYYY:80, idle 0:00:43, byt...

Hello, I'm trying to find information about PKI SNMP Traps for DMVPN spoke/hub routers using PKI. I found a document that touched on it but it was related to a Cisco router configured as a CA server. I need to know if there are SNMP PKI traps for spo...

Hi All, I wanted to share something that I've found useful during troubleshooting. [Sorry for the wall of text in advance] I have on open TAC case where we see some issues with the Firepower Control/Application features. Basically, we have an ACP rul...

we Have configured ASA Remote access web ssl vpn and configured the  VDI Access to Xenapp 7.11 application when we try to open the application it is given us error (HdxSdkErrorDomain_Session error8). we have recently upgrade  GeoTrust ssl certificate...

Hi all, I suspect my FirePower are hitting the below bug because everytime application opening/closing for traffic surge the Firewall(or FirePower) will experience few minutes of traffic dropout and recovered by itself. http://www.cisco.com/c/en/us/...

Hi, We are trying to configure standalone MAB feature for the authentication of devices based on MAC address only. Here is the relevant configuration for the switch: interface GigabitEthernet1/0/23 switchport access vlan 5 switchport mode access swit...

Hello,I have a question about OVAL file from advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ios-ips. Is it right that all line tests have the same states?