Network Security

I'm evaluating ASA5500-X with FirePower bundle with Eval licenses. I'm facing 2 issues with FSMC, 1, FSMC show 2 critical health errors for SFR & Sourcefire3D related to time synchronisation. - Module Time Sync is out. 2, Nothing is displayed in "Con...

Is there an available lookup for File Malware Disposition? I am integrating Sourcefire with Splunk and the dashboards produce unknowns for Malware with file actions. The dispositions I see are 1,4 and 3.

Hi All, I'm having issues with this particular traffic flow and see multiple connections from various source ports to the same high order port TCP/49155 being denied whilst using hyper-v manager through the firewall. Bi-directional AD traffic works f...

Hi, I am running a Cisco 5505 firewall 9.2(4) and have VPN users connecting in using the old Cisco VPN client v5.0.07.0290. When these VPN users login is there a way to include these users VPN login and logout information in the syslog? BTW the syslo...

Hi, I am setting up ASA 5525-X for Client to Site VPN. I have users on old RADIUS server which I want to blow away. Idea is to migrate users and passwords from RADIUS (old linux box) to ASA. Is it possible to migrate password hashes? Hashes are in th...

Hey folks. I could use a hand.  I'm trying to setup a VPN tunnel for monitoring from a remote partner.  I'm getting the Tunnel established, but I'm having a conceptual problem.  I have internal LAN addresses that will be monitored from the remote par...

Hi all, I am trying to migrate our PIX firewall to ASA.  I am very new to the firewall domain since my skills are mainly for routing and switching... I have attached the topology and the configs of the PIX and configs of the ASA when converted.  The ...

Hello All. This may be a re post, but is there any reason someone may add this many images to the bootvar?  Would it be due to the way different version(s) of the ASA IOS interpret NATing? or even access lists? I can see having one extra in the strin...

Guys We have a Rockwell FactoryTalk SCADA system that uses DCOM as a communication protocol to talk to clients. The problem now is that DCOM requires port 1024-65535 to be opened on the firewall? (unless I have been told the wrong information?) Is th...

Hi, just wondering if anyone can help before I raise a TAC I have just updated Firepower Management Center to 6.0.0.1 and now trying to install Fingerprint (4.5.0-261), Geo DB (2016-02-24-001) and Rules (2016-03-030002) updates and I get an error com...

Hello! We are beginning our deployment of Cisco ISE and not sure how to proceed on our domain for ISE.  Should we use *.ise.company.com or just *.company.com?  We understand the security advantages of using ise.company.com, but it is worth any issues...

I have been piloting a Cisco Meraki MX64 device for quite sometime and we have been looking at it specifically to see what data can get out of it for SIEM integration. Per the documentation that I've found and working with Cisco  we should be able to...