Network Security

Does anyone have any examples of custom network analysis rules (advanced section of Access control policy). I have tuned the NA policy based on reassembly and fragmentation but I am trying to imagine a scenario where you would need a custom na rule. ...

Hello All, Is there an easy way to update the network objects in FMC other than manually creating/updating each one by one? We have hundreds of network objects that we would like to import from Infoblox but I cannot see an easy way to do it currently...

Hi all, my architecture is :  and my ASA config is:  interface GigabitEthernet0 nameif outside security-level 0 ip address 192.168.2.1 255.255.255.0!interface GigabitEthernet1 nameif inside security-level 100 ip address 10.30.60.1 255.255.255.0!inter...

I have a ASA 5505 and I am trying to enable traffic from the Inside interface with traffic on the Wireless interface. Both interfaces have a security level of 100 and the same-security-traffic permit inter-interface has been used but I cannot ping fr...

hi i have 2 6509 core switches with each one having one fwsm installed and failover configured between them i plan to do the following upgrade: asdm:6.1(3)F >>> 6.2(3)F ios:4.0(5) >>> 4.1(15) i read that if it isnt a major upgarde i can upgrade them ...

It has been a few years since I added a second ASA to an active one that was not configured for failover. I forget the order to activate failover. I remember the first time doing this I goofed and the secondary unit, which had nothing but failover co...

All A Vendor ASA will connect to my Core device via port-channel.  They will need to access a few devices on my network which will be restricted with acl's by address and port. I have given Vendor a subnet (192.168.53.x) from my network to use for th...

I'm evaluating ASA5500-X with FirePower bundle with Eval licenses. I'm facing 2 issues with FSMC, 1, FSMC show 2 critical health errors for SFR & Sourcefire3D related to time synchronisation. - Module Time Sync is out. 2, Nothing is displayed in "Con...

Is there an available lookup for File Malware Disposition? I am integrating Sourcefire with Splunk and the dashboards produce unknowns for Malware with file actions. The dispositions I see are 1,4 and 3.

Hi All, I'm having issues with this particular traffic flow and see multiple connections from various source ports to the same high order port TCP/49155 being denied whilst using hyper-v manager through the firewall. Bi-directional AD traffic works f...

Hi, I am running a Cisco 5505 firewall 9.2(4) and have VPN users connecting in using the old Cisco VPN client v5.0.07.0290. When these VPN users login is there a way to include these users VPN login and logout information in the syslog? BTW the syslo...

Hi, I am setting up ASA 5525-X for Client to Site VPN. I have users on old RADIUS server which I want to blow away. Idea is to migrate users and passwords from RADIUS (old linux box) to ASA. Is it possible to migrate password hashes? Hashes are in th...