Network Security

Hi all, my architecture is :  and my ASA config is:  interface GigabitEthernet0 nameif outside security-level 0 ip address 192.168.2.1 255.255.255.0!interface GigabitEthernet1 nameif inside security-level 100 ip address 10.30.60.1 255.255.255.0!inter...

I have a ASA 5505 and I am trying to enable traffic from the Inside interface with traffic on the Wireless interface. Both interfaces have a security level of 100 and the same-security-traffic permit inter-interface has been used but I cannot ping fr...

hi i have 2 6509 core switches with each one having one fwsm installed and failover configured between them i plan to do the following upgrade: asdm:6.1(3)F >>> 6.2(3)F ios:4.0(5) >>> 4.1(15) i read that if it isnt a major upgarde i can upgrade them ...

It has been a few years since I added a second ASA to an active one that was not configured for failover. I forget the order to activate failover. I remember the first time doing this I goofed and the secondary unit, which had nothing but failover co...

All A Vendor ASA will connect to my Core device via port-channel.  They will need to access a few devices on my network which will be restricted with acl's by address and port. I have given Vendor a subnet (192.168.53.x) from my network to use for th...

I'm evaluating ASA5500-X with FirePower bundle with Eval licenses. I'm facing 2 issues with FSMC, 1, FSMC show 2 critical health errors for SFR & Sourcefire3D related to time synchronisation. - Module Time Sync is out. 2, Nothing is displayed in "Con...

Is there an available lookup for File Malware Disposition? I am integrating Sourcefire with Splunk and the dashboards produce unknowns for Malware with file actions. The dispositions I see are 1,4 and 3.

Hi All, I'm having issues with this particular traffic flow and see multiple connections from various source ports to the same high order port TCP/49155 being denied whilst using hyper-v manager through the firewall. Bi-directional AD traffic works f...

Hi, I am running a Cisco 5505 firewall 9.2(4) and have VPN users connecting in using the old Cisco VPN client v5.0.07.0290. When these VPN users login is there a way to include these users VPN login and logout information in the syslog? BTW the syslo...

Hi, I am setting up ASA 5525-X for Client to Site VPN. I have users on old RADIUS server which I want to blow away. Idea is to migrate users and passwords from RADIUS (old linux box) to ASA. Is it possible to migrate password hashes? Hashes are in th...

Hey folks. I could use a hand.  I'm trying to setup a VPN tunnel for monitoring from a remote partner.  I'm getting the Tunnel established, but I'm having a conceptual problem.  I have internal LAN addresses that will be monitored from the remote par...

Hi all, I am trying to migrate our PIX firewall to ASA.  I am very new to the firewall domain since my skills are mainly for routing and switching... I have attached the topology and the configs of the PIX and configs of the ASA when converted.  The ...