Network Security

Hi, I'm doing a cisco migration context from fwsm to asa 9.4.  When I look in csm, i see that there's no destination in my nat rule. It only have source and translated address. Also, it doesn't have an associated access-list. How do I intepret that ?...

I have issues connecting with SSH to my Cisco ASA firewall. My SSH client (osx terminal) complains about sha1 that is the only key exchange hash method that the ASA supports. I cannot find any solution for it on the Cisco-side. Any ideas? https://na...

Hi Guys and Girls. A few weeks ago on a long Sunday afternoon I was decommissioning some network equipment from our Current Setup. whilst I was in the Process of "Tidying" the network I decided to install ADSM instead of using the console. "I cant Re...

Hi,Can we create time based access policies in SourceFire module in 6.0.0 version.Thanks and regards,Ashok

I was deploy firewall using Cisco Firepower Management Center and ASA5545. I was configure access Policy for filter application (Facebook, Hotspot Shield, Ultrasuft) but firewall only filter facebook on web browse, can not filter facebook application...

Hi, with ASA Release Interim 9.4.2.6 or ASA 9.5.2+ it is not possible for us to use certificates signed from a custom CA (with RSA encryption). Public Key Type: RSA (2048 bits) Signature Algorithm: SHA512 with RSA Encryption 2016-02-23T09:30:23+01:0...

we are about to deploy a 5555x in active/standby with firepower modules. question i have is if the firepower module policies will be copied over to the standby unit? like everything else in the ASA

Dear Experts, Can anyone of you please let me know the day to day activities of firewall specialists. what exactly he does on the daily basis. On what level does he work on. what kind of issues does he face daily or what kind of threats he deals wit...

Hello all, I have sourcefire is installed and sports category is blocked but when I refresh page many times it open sometimes only first page but when I go browse site it will not open. when I check logs I see that action is block  Please advice T...

Hi, I have an ASA 5516 cluster running a managed pair of resilient internet lines. Main Cluster  1 -ISP - 2800 - ASA1 (active) - LAN 2 -ISP - 2800 - ASA2 (passive) - LAN I have also have an ASA 5505 which is connected to a separate internet line. ...

Hi, I am having one urgent issue to fix. I have set 2 subnets (WAN from ISP). WAN1 that is used for GuestWiFi, and WAN2 for TVServer. GuestWiFi is set and working perfectly, but TVServer WAN is multiple public IP. What I've done is, set first IP on p...

Firesight categorizes search bots (Googlebot, Bingbot, Yahoo! Slurp) as very high risks. I see them frequently hitting our webservers but I would expect this is the normal indexing process. Can anyone explain why these bots are considered "Very High"...