Network Security

One cpu is stuck at 100% for cpu 03 on a FirePower module on an ASA 5545-x.  Going into the the console for the module and doing a "top" command I see that the process using the most CPU is "ids_event_alert".   Does anyone have any documentation on ...

i have an ASA5515 i need to know how to utilize the benefits from using this security tool on the ASA and how the "Shun" can be trigger if someone can provide me with Guide for this toolthank you

Hi all,I have an asa 5510 with inside network 192.168.0.0/24 and the server ip is 192.168.2.5/24 as attached in the show run.When the user in inside network opens the oracle system it open after login successfully, but when user try to view/query rep...

Any one help for Cisco ASA Configuration using ASDM ??? Now i am accessing CLI but do not accessing GUI ???

Hi Team, We have a requirement wherein FTD is to be implemented and the customer wants that the physical interface should be capable of link aggregation as per IEEE 802.3ad or equivalent standard, allowing the grouping of interfaces into a larger ba...

Hi! On ASA, suppose I apply a inbound control plane ACL on outside interface; what will be the impact / consequence to the inbound traffic that is using outside interface IP for PAT or Static PAT. Control plan ACL is applied to restrict to-the-box t...

On my Firepower Center Manager, I am seeing the HI_CLIENT_BARE_BYTE alert/event with bogus IPs that are not within my network, In example with source IP 0.0.0.0 as well as 8.0.0.0 and others to random external IPs most of which either private range o...

I have a ASA 5525 running 8.6.1 My requirement is for server 1 to send web service requests to server 3 and server 4 some relevant config snippets: object network server_3  host 10.1.5.6  nat (inside,dmz) static 192.168.100.6 object network server_4 ...

Hello I have a couple of ASA5550 acting as border firewalls as well as a couple of FWSM as inter-vlan firewalls. I am now working on minimizing half-open connections on the ASA by limintimg the number embryonic connections. Now on the FWSM which is...

Hi,  Getting quite strange ip addresses in src and dst fields which are not part of the customers network, for eg. 0.0.0.0 as a source.  SOme more eg. [119:4:1] http_inspect: BARE BYTE UNICODE ENCODING [Impact: Unknown] From "NAME" at Tue Jul 26 21:...

Hello, Any one configured ASA5585-X threat detection to auto shun IP Address which are doing port scan.. acl-deny is happening to ports which are not open. But i want to auto-shun the same I have tried below  steps threat-detection Basic-Threat th...

Hi Guys, I need a little assistance here. I am configuring a ASA-5512-x. I need to make communication between interfaces of same security level. I tried "same-security-traffic permit inter-interface" and I tried doing static nat, dynamic nat, pat,,b...

Hopefully someone can help me. What is the licensing procedure that I have to follow to get my Firepower Management center up and working? We purchased the Cisco FireSIGHT Management center, (VMware) for two devices. I have the PAK, have received the...

Hello Professionals, Can you help me with these challenges: 1. my https site is not opening on Mozilla firefox but its opening on Google Chrome. has anyone experience this? 2. Is it possible to configure a URL to be redirecting to a secured URL up...

Hi I have done an attempted asa system image upgrade from CLI but have a problem with the old image getting loaded - cannot get the new image to stat after a further reload or reboot I have copied the new .bin image to flash and can see it in flash/d...