Network Security

Hi,I've got a 2960-x running SSHv1.1) I need to disable SSHv1 and only run V2. Will the line listed below run ONLY SSHv2 and disable V1?2) I need a cisco document that says SSHv1 can  be completely disabled and only V2 runs on a 2960x.I know that I n...

Dear All, This is my first post in the Cisco community. We bought a ASA 5506-X and it is already configured. The ASA came with a base license already installed. In the box was a sheet with the PAK key (Control license). I tried to register the PAK ke...

Hi,I have ASA Firewall that will host both our Anyconnect VPN and clientless SSL Webvpn. I am planning to install public CA cert. It will require two certs , one for each vpn. The ASA hostname will not be just a regular firewall hostname. I am cautio...

HiI have a HA pair of firewalls with single Public IP. On the inside I just have a directly connected network with a /24 subnet. I host a few management applications on the internal network and a Windows Server.I want to RDP into my Windows Server fr...

I have a ASA 5505 set up as a DHCP server at a customer site.  I have 3 clients connected to the inside interface.  The outside interface is connected to my Comcast cable modem.  Initially after firewall reload (reboot), all works as expected All thr...

Hi there I'm using a Cisco asa 5506-x device with the ASDM version 7.4 I'm trying to allow for users to RDP into my computers on a network. I've created a NAT Network object with the IP address of the device, and the port I want it to allow RDP into ...

Guys,  Could anyone explain me why to  use Active/Active Mode on Firewalls?Also please provide all disadvantages of using this mode, from what I heard such mode could create many potential issues

Hey guys, I am trying to consolidate 2 different firewalls into another ASA 5520 active/standby firewall, and only have 1 interface available, I wanted to make sure that I can use sub-interface for site-to-site VPN, anyconnect, and also another sub-i...

Hello.I am testing a new ASA firewall and am repeatedly getting the following mesages in Syslog[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 7 per second, max configured rate...

Hello,i have created a ACL for  inside to outside traffic For details you can see the attachmentI have only permitted the 192.168.1.X series ips  but still users who are having ip addresses like 192.168.2.X and 192.168.3.x and so onable to access int...

Our Internet access is connected to a Nexus 9500 switch.  Internet traffic is passed through the Nexus to a none-Cisco firewall [master/slave fail-over] for filtering.  Data is filtered by the firewall back to the L3 switch for routing to destination...