Network Security

Our vulnerability assessment has shown that we are potentially vulnerable to Layer 7 DoS attacks like slow http post (http://tinyurl.com/3l4fnjg) or slow http headers (http://tinyurl.com/lgph8j).  I'm wondering if there is anything we can do at the A...

I'm trying to wrap my head around the new NAT in v8.4 and greater - specifically 9.4.For a VPN policy I need to NAT hosts before encryption.I have a need to upgrade a 5510 running 8.2(5) and one of the issues is NAT.I'm familiar with 8.2 policy-nat i...

Hi Experts,  New to Cisco world here. I need to know if it is possible to create a full mesh site-to-site IPSec VPN using Cisco ASA firewalls. There are 8 sites to begin with and 21 sites in all.  Thanks in advance for your suggestions.

Hi AllSeeking for suggestion on Real Time Activity Monitoring Tool for Cisco ASA 5540 and PIX 525 and possible store data to generate reports.Tool which provides what bandwidth is consumed inbond/outbond for services like  email, web browsing, termin...

Hi all, I have 8 asa5506 installed in 8 different locations connected by a WAN MPLS circuit.  I wuold like to implement next generation services like IPS, URL and AMP and manage all my firewall with a virrtual defence center installed on my central s...

Does anyone have a homebrew, or public facing doc on how to perform a recovery of a 4100 series appliance ?I have a doc that traces the steps to perform this manual RomMon based update of a 9300, and based on the similarities in the architecture, It'...

Hello Team,  Iam getting a gig fiber circuit to a fiber interface gigabit 1/0- I do not see an option where i can set speed and duplex on any of the interfaces. The ISP is asking me set speed to GIG full. Currently, they are giving me a 300MB copper ...

I have ASA 5520 with DMZ and LAN networks configured DMZ security is 50 LAN security is 100 traffic from LAN to DMZ is permitted by default i want to open file share from DMZ PC to LAN PC i created access list to test the operation access-list dmz_in...

Just tried to install the Firepower based on Firesight 8000-series.The installation of the device went well and i can SSH into it and access the GUI.However there are problems access the management center Firesight, the 443 port is open and it gets t...

Hello, I realize there have been many posts about QoS on the ASA before, but I'm hoping to gain some further clarification/insight on a specific situation. For starters, I have an ASA 5505 on 9.1(2) code. I have two VLANs configured (inside and outsi...

it is my understanding that i can only get software updates with a service contract. I am using an ASA 5505 for hobby projects and can't justify a service contract. Do you offer any discounts for open source use, or, perhaps a way to purchase one-off...