Network Security

Hello, I've been working on implementing a Zone Based Firewall for our offsite users that utilize an 881 router with DMVPN tunnels to connect. Right now I have an outsize zone (WAN facing), inside zone (LAN) and the self zone. I have zone pairs for I...

Hello Cisco Community, I would like to know what kind of training we need to have to learn the linux of (ACS, ISE and Sourcefire)? Thanks in Advance.

Hi I have a ASA 5545 with version 9.4(2)11 in routed mode And I have problems with the Global ACL. I started with ACL's on the interfaces and that works fine. I put an ACL's on the interfaces with the lowest security and I use the ASA default that tr...

We are looking at replacing our old Cisco ASA firewalls with the ASA 5545X with firepower IPS, URL and AMP in a active/standby configuration. I have attached our topology, which is HQ and three remote sites. All servers and network resources (includi...

I purchased a Cisco 5506 - x on Amazon and I am now looking for a certified partner so I am able to download my patches. I have contacted 3 in my area and they are not familiar with what to do with a ASA that has been purchased from Amazon. I find it...

I have a Firesight Management Console VM that has been running fine for a couple of months. I tried to log in today and got the following error: "Unable to authorize access. If you continue to have difficulty accessing this device, please contact the...

Have a client who only had provision for single IP address on the outside interface. Now they have had a another /29 subnet as they needs have increase. The current outside IP has 4 L2L VPN and 9 DNS entries , so instead of have to rekey all the chan...

I have a firewall DOD DISA STIG I need to apply. I have to set authentication timeout to 60 seconds. Is there a way to set authentication timeouts? So if a user tries to SSH into the device and let it sit at the login screen for 60 seconds, reset/dro...

Currently I'm able to limit bandwidth for the whole subnet like this: I want to have a limit of 2Mb down 1Mb up for each client not the whole subnet. Yes I could create two access-lists and class maps for every single IP in the range, but I don't fee...

HiWe use security level 0 outside and 100 in inside. but when we use security level other interface (dmz) then 50 or 30 or 20. so my question is what is security difference 50 ,30, 20 ?.when i use 50 or 30 or 20 ??thanksBiplob

Hi allI got few questions would like to consult you all, it's about Sourcecfire FMC 01. Since version 6.x code, ASA now can do the SSL decryption on the box.But if the user using VPN client application (example strongVPN), is the SSL policies able to...

Hi I am installing Firesight MGMT server 6.1 on Exsi version 6.0. The installation is running but during the installation its stopping at a stage and is getting stuck. I am also attaching the snapshot for the error which I got while installing versio...