Network Security

prevent BlackNurse DoS attack on ASA. What commands should be configured to prevent it etc. Thanks in advance for any help

Hi I have AnyConnect RA SSL VPN configured on ASA. Lets assume following Addresses: Outside Interface IP where the Users Connect to: 172.16.10.1 Inside net: 10.10.10.0/24 with inside interface IP 10.10.10.1/24 VPN Pool: 192.168.10.0/24 So this pool i...

Hi I have a pair of ASA5520's running 8.4(7) with the standby logging "NAT/PAT pool exhausted. Unable to create connection", the active ASA does not log the same message. I don't understand why the standby is logging anything, is this a bug?

Hi Team, We had a document that highlighted the differences in the on-box and offbox (VM or physical) firesight management center in terms of provided functionalities for firepower services on ASA, not able to locate that. Can anyone share the same? ...

Hello, I was hoping someone had some input here.  I have an SBG6580 modem/router in bridge mode with a router to it so I can use my own router (AE Extreme).  Anyway, I have port 0/0 into the modem, and have AE Extreme into port 0/1 of the ASA.  I hav...

Hello there One of our internet providers require Option 60 to be set in the DHCP client request to get an public IP and to be allowed on the network. Unfortunately, I was unable to find a configuration setting to provide option 60 during DHCP client...

Tengo un ASA 5508-x pero no logro poder entrar por browser por la management interface. El equipo esta nuevo. He intendo como dice en el  link http://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/5508X/ftd-fdm-5508x-qsg.html o http://w...

Hello, I have two Firepower Management Center FS4000 with software version 6.0.1.2. The documentation explains that HA pair is not supported in this version. How can I do to mantain a primary defense center and a secondary defense center?   

In Firesight, I'm trying to look up the internal address to NAT address for a specific port, at a specific time.  I have the NAT address and the port, and need the internal IP address.

Using AMP8150 with 5.3.0.3 I see a sig tripping that shouldn't be. 1:655:16.  Sig: alert tcp $EXTERNAL_NET 113 -> $SMTP_SERVERS 25 (msg:"SERVER-MAIL Sendmail 8.6.9 exploit"; flow:to_server,established; content:"|0A|D/"; metadata:ruleset community, se...

All, I'm having an issue pushing an Access and Intrusion Policy to a remote sensor over a Satellite link with high latency and low bandwidth.  Latency is about ~700ms and bandwidth is about 116k, I know state of the art right.  It is experiencing RPC...