Network Security

Hi, We reviece some logging alerts from our Cisco ASA firewall with the message: "Inbound TCP connection denied from 192.168.1.x/x to 192.168.1.y/y flags SYN interface intX. The two hosts is on the same subnet, and I'm wondering why this traffic is...

I have an ASA 5516X that is fully licensed (i.e. Control, Protect, URL and Malware). When using ASDM, there is a “FirePOWER Reporting” tab. But it has only displayed “No Data Available”. How is FirePOWER to be configured inorder for data to be availa...

Hello, I got some Meraki MS350-24x and they are supposed to automatically connect to the Meraki dashboard and they do if I connect the directly to the modem but behind the ASA 5512x won't leave the local network this is what I'm supposed to configur...

One cpu is stuck at 100% for cpu 03 on a FirePower module on an ASA 5545-x.  Going into the the console for the module and doing a "top" command I see that the process using the most CPU is "ids_event_alert".   Does anyone have any documentation on ...

i have an ASA5515 i need to know how to utilize the benefits from using this security tool on the ASA and how the "Shun" can be trigger if someone can provide me with Guide for this toolthank you

Hi all,I have an asa 5510 with inside network 192.168.0.0/24 and the server ip is 192.168.2.5/24 as attached in the show run.When the user in inside network opens the oracle system it open after login successfully, but when user try to view/query rep...

Any one help for Cisco ASA Configuration using ASDM ??? Now i am accessing CLI but do not accessing GUI ???

Hi Team, We have a requirement wherein FTD is to be implemented and the customer wants that the physical interface should be capable of link aggregation as per IEEE 802.3ad or equivalent standard, allowing the grouping of interfaces into a larger ba...

Hi! On ASA, suppose I apply a inbound control plane ACL on outside interface; what will be the impact / consequence to the inbound traffic that is using outside interface IP for PAT or Static PAT. Control plan ACL is applied to restrict to-the-box t...

On my Firepower Center Manager, I am seeing the HI_CLIENT_BARE_BYTE alert/event with bogus IPs that are not within my network, In example with source IP 0.0.0.0 as well as 8.0.0.0 and others to random external IPs most of which either private range o...

I have a ASA 5525 running 8.6.1 My requirement is for server 1 to send web service requests to server 3 and server 4 some relevant config snippets: object network server_3  host 10.1.5.6  nat (inside,dmz) static 192.168.100.6 object network server_4 ...

Hello I have a couple of ASA5550 acting as border firewalls as well as a couple of FWSM as inter-vlan firewalls. I am now working on minimizing half-open connections on the ASA by limintimg the number embryonic connections. Now on the FWSM which is...

Hi,  Getting quite strange ip addresses in src and dst fields which are not part of the customers network, for eg. 0.0.0.0 as a source.  SOme more eg. [119:4:1] http_inspect: BARE BYTE UNICODE ENCODING [Impact: Unknown] From "NAME" at Tue Jul 26 21:...

Hello, Any one configured ASA5585-X threat detection to auto shun IP Address which are doing port scan.. acl-deny is happening to ports which are not open. But i want to auto-shun the same I have tried below  steps threat-detection Basic-Threat th...