Network Security

Hi Team, This is with respect to the enabling of SSL inspection enabled on the ASA firepower. The customer is insisting to give us a figure of performance impact on the models ASA 5555-X, 5545-X and 5515-X. As per our sizing guidelines we need to con...

Hi All I have a question around Cisco Firesight. What is the recommendation around setting up Cisco Firesight Policies for multiple FWs. Say if i have 20 x2 Active/Standby FWs doing pretty much same functionaility. Shall I setup one policy for all of...

Dear all, I have a very basic question about logs. I'm unable to use logs in a useful way with my ASA.. My goal is to see the traffic going though one of my ACL. My ACL is like this: Source           Destination           port 10.32.1.0/24  any      ...

Hi, On our Firepower system we block all incoming malware after file lookup. We have an issue on incoming SMTP traffic; because the incoming malware has been blocked (and connection is reset), the sending SMTP will retry to send us the same mail with...

So it seems the rsa host key is stored in a database in one of the ios-xr filesystems. I've been tasked with restoring both RSPs on router, and while having backup configs, licenses, and snmp folders have all been prescribed, I'm very concerned about...

We recently purchased a license i.e. ASA 5512-X CX Application Visibility and ControlAs part of the process we had to install ASA-CX module ; We caught up in trouble while doing that.As per the manuals , we did upgrade the ASA software (to 9.1.2) alo...

I have a new ASA 5506-X. I would like to connect to it from my Windows PC using the Cisco VPN Client on my PC. I did not purchase any special licenses with my 5506-X. Are VPN connections supported to this ASA out of the box or do I need to purchase a...

My objective is to intercept traffic from a particular subnet (192.168.5.0/24) that has been directed to the ASA as the default external route and then redirect that traffic to a proxy server that exists on the ingress interface. I've set up the PBR ...

Hello, For particular one session we are seeing lots of UfrIOB Flag.  Any reason for that ?  tap-glm XXXXXX:2917 glm-old-backend YYYYYYY:80, idle 0:00:43, bytes 1257, flags UfrIOBTCP tap-glm XXXXXX:2915 glm-old-backend YYYYYYY:80, idle 0:00:43, bytes...

Hello, I'm trying to find information about PKI SNMP Traps for DMVPN spoke/hub routers using PKI. I found a document that touched on it but it was related to a Cisco router configured as a CA server. I need to know if there are SNMP PKI traps for spo...

Hi All, I wanted to share something that I've found useful during troubleshooting. [Sorry for the wall of text in advance] I have on open TAC case where we see some issues with the Firepower Control/Application features. Basically, we have an ACP rul...

we Have configured ASA Remote access web ssl vpn and configured the  VDI Access to Xenapp 7.11 application when we try to open the application it is given us error (HdxSdkErrorDomain_Session error8). we have recently upgrade  GeoTrust ssl certificate...