Network Security

Hello Gents, we have on our ASA huge number of connections which seems to be idle. Similar to below:TCP INET_FW: XX.XXX.XXX.XXX/56535 INET_CORE: YY.YY.YY.YY/20406,    flags UfIB , idle 1h3m, uptime 1h9m, timeout 15m0s, bytes 444 For this specific con...

Hello! We have encountered a problem with our Identity Firewall scheme recently (it works on CDA, 4 Microsoft 2012R2 DCs and Cisco ASA as a consumer device). We've noticed that some ip-to-user mappings are missing on CDA although users are in domain ...

Hi, I have to configure static nats with diferrent range of ISP2, they forward another range over this link. For example, they foward range 5.5.5.0/32 to we use from their address : 4.4.4.0/24. I configured the follow configs but donw works: inter...

Hello I upgraded our Cisco ASA 5520 with a Cisco ASA 5585. Though both ASA were configured with default TCP Idle Connection Timeout values people are now starting to complaint that idle SSH connections are being terminated. This is proper behavior bu...

Hello, Good Day! Just wanted to ask what is the fix for this alert? %ASA-4-402119: IPSEC: Received an ESP packet (SPI= 0x229, sequence number= 0x4A2) from  (user= ) to  that failed anti-replay checking.

I have run into this issue many times with FirePower deployments.  Customers want to see what the interface utilization for each ASA/FTD device is at on the dash board.  Ive gone through all the widgets and while I found I can create what looks like ...

I have been wrestling with enabling tcp-bypass recently. We have assymetrical routing happening between two providers with BGP configured. I have tried configuring tcp-bypass on the inside interface, outside interface, and globally. Each time the PAT...

I'm working on some requirements to secure our devices. On the ASA, the SSL settings has SHA1 listed as the hashing.  Is there a license feature that updates it to SHA2 or greater?

I'm looking for the most recent Cisco audit files to use with ACAS.  Is there any available (after 2010) and if so, where to download them.  THANKS!

Please can anyone put me through on how to set number of login limitation to a linux server behind ASA Firewall. Will it be done on the server or Firewall?  How can i achieve that? Thanks

To manage 4110 firewall i must to have firesight ? even if i didnt buy any firepower lic ?

I installed the SFR module on the ASA and ran through all the configuration.  I registered it to my FirePower Management Center, however I failed to add the license to the SFR prior to doing that and the Management Center is not seeing my smart licen...

IPS report shows victim IP address on which the attack was launched, how is external attacker able to attack specific private IP addresses in a huge infrastructure?